[DSE-Dev] Bug#678564: selinux-policy-default: Several process are running in incorrect context when using systemd
ayaka
randylxr at gmail.com
Sun Dec 2 06:00:58 UTC 2012
Package: selinux-policy-default
Version: 2:2.20110726-11
Followup-For: Bug #678564
Dear Maintainer,
The context of /lib/systemd/systemd is system_u:object_r:lib_t:SystemLow, but I think the correct is system_u:object_r:init_exec_t:SystemLow
The context of /usr/sbin/gdm3 is system_u:object_r:bin_t:SystemLow, but I
think the correct is system_u:object_r:xdm_exec_t:SystemLow
I chconed they
Althought the /usr/bin/dbus-daemon is system_u:object_r:dbusd_exec_t:SystemLow, /usr/bin/X11/dbus-daemon is system_u:object_r:dbusd_exec_t:SystemLow
But in ps axZ
system_u:system_r:init_t:s0 2182 ? Ssl 0:01
/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile
--systemd-activation
user_u:user_r:user_dbusd_t:s0 4135 ? Ssl 0:00
/usr/bin/dbus-daemon --fork --print-pid 5 --print-address 7 --session
user_u:user_r:user_dbusd_t:s0 4145 ? Ssl 0:00
/usr/bin/dbus-daemon --fork --print-pid 5 --print-address 7 --session
Is the context of the first processe correct?
*** End of the template - remove these lines ***
-- System Information:
Debian Release: wheezy/sid
APT prefers testing-proposed-updates
APT policy: (500, 'testing-proposed-updates'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.4.19 (SMP w/2 CPU cores)
Locale: LANG=zh_CN.UTF-8, LC_CTYPE=zh_CN.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages selinux-policy-default depends on:
ii libpam-modules 1.1.3-7.1
ii libselinux1 2.1.9-5
ii libsepol1 2.1.4-3
ii policycoreutils 2.1.10-9
ii python 2.7.3~rc2-1
Versions of packages selinux-policy-default recommends:
ii checkpolicy 2.1.8-2
ii setools 3.3.7-3
Versions of packages selinux-policy-default suggests:
pn logcheck <none>
pn syslog-summary <none>
-- Configuration Files:
/etc/selinux/default/modules/active/file_contexts.local [Errno 13] Permission non access: u'/etc/selinux/default/modules/active/file_contexts.local'
-- no debconf information
More information about the SELinux-devel
mailing list