SELinux run process as type?
Hello, I have created some rules in SELinux that allows reading/writing to files. I am trying to test that I can or cannot read under certain types with a simple C program I wrote. I can set the type of the program with a simple $chcon -t blah_t program, and when I run $ls -Z, it shows that it is the correct type, however when I run the program and run $ps -eZ | grep program, it still shows the program as running under the unconfined_t type. How can I run this program under the designated type I have assigned? I have rules to allow transitioning from unconfined_t to blah_t, but that hasn't worked.
Thanks in advance! |
When I need a policy for a daemon I use the sepolgen GUI. See 'man sepolgen'?
|
All times are GMT -5. The time now is 07:25 AM. |