* run_init requires full path.
@ 2006-09-20 15:30 Daniel J Walsh
2006-09-20 21:07 ` Stephen Smalley
0 siblings, 1 reply; 2+ messages in thread
From: Daniel J Walsh @ 2006-09-20 15:30 UTC (permalink / raw)
To: Stephen Smalley, SE Linux
Why does run_init require me to have the full path? Is there a security
reason for this?
The basic problem is run_init, does a chdir("/") before execing the app.
So if I want to run a test script
run_init test.sh or
run_init ./test.sh
does not work.
I end up having to do
run_init `pwd`/test.sh
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread* Re: run_init requires full path.
2006-09-20 15:30 run_init requires full path Daniel J Walsh
@ 2006-09-20 21:07 ` Stephen Smalley
0 siblings, 0 replies; 2+ messages in thread
From: Stephen Smalley @ 2006-09-20 21:07 UTC (permalink / raw)
To: Daniel J Walsh; +Cc: SE Linux
On Wed, 2006-09-20 at 11:30 -0400, Daniel J Walsh wrote:
> Why does run_init require me to have the full path? Is there a security
> reason for this?
>
> The basic problem is run_init, does a chdir("/") before execing the app.
>
> So if I want to run a test script
> run_init test.sh or
> run_init ./test.sh
>
> does not work.
>
> I end up having to do
> run_init `pwd`/test.sh
See:
http://marc.theaimsgroup.com/?l=selinux&m=102077444021285&w=2
Otherwise, it is quite common to run into audit noise when the init
script or daemon tries to access the cwd.
--
Stephen Smalley
National Security Agency
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2006-09-20 21:07 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-09-20 15:30 run_init requires full path Daniel J Walsh
2006-09-20 21:07 ` Stephen Smalley
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.