From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from jazzhorn.ncsc.mil (mummy.ncsc.mil [144.51.88.129]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with ESMTP id k4C7qPYg032610 for ; Fri, 12 May 2006 03:52:25 -0400 Received: from ug-out-1314.google.com (jazzhorn.ncsc.mil [144.51.5.9]) by jazzhorn.ncsc.mil (8.12.10/8.12.10) with ESMTP id k4C7qO6C002401 for ; Fri, 12 May 2006 07:52:24 GMT Received: by ug-out-1314.google.com with SMTP id u2so294867uge for ; Fri, 12 May 2006 00:52:23 -0700 (PDT) From: "Mario Fanelli" To: "SeLinux Mailing List" Subject: Trouble with setexeccon/setcon Date: Fri, 12 May 2006 09:52:19 +0200 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0003_01C675A9.C35CF5D0" Message-ID: <44643eb7.025ecbeb.7447.326d@mx.gmail.com> Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov This is a multi-part message in MIME format. ------=_NextPart_000_0003_01C675A9.C35CF5D0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hello, my name is Mario and I have a trouble with selinux's api. My goal is to modify the suPhp apache module, but the function setcon and function setexeccon don't work. My apache process runs in dummy_t domain and suPhp file has a security context "user_u:object_r:dummy_exec_t"; in the policy file I write: "domain_trans(dummy_t,dummy_exec_t,dummy_change_context_t)" "domain_trans(dummy_t,dummy_exec_t,dummy_change1_context_t)" And before calling apr_create_process in mod_suphp, I use setexeccon("user_u:object_r:dummy_change_context_t") but the function return always -1 ------=_NextPart_000_0003_01C675A9.C35CF5D0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hello, my name is Mario and I have a trouble with = selinux’s api. My goal is to modify the suPhp apache module, but the function = setcon and function setexeccon don’t work.

My apache process runs in dummy_t domain and suPhp = file has a security context “user_u:object_r:dummy_exec_t”; in the = policy file I write:

“domain_trans(dummy_t,dummy_exec_t,dummy_change_= context_t)”

“domain_trans(dummy_t,dummy_exec_t,dummy_change1= _context_t)”

And before calling apr_create_process in mod_suphp, I = use setexeccon(“user_u:object_r:dummy_change_context_t”) but the function return always -1

------=_NextPart_000_0003_01C675A9.C35CF5D0-- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.