[DSE-Dev] SELinux prevents service from loading shared libraries -- no corresponding audit messages

Christopher-A. Kopel kopel at student.tugraz.at
Thu May 31 19:36:21 BST 2018


Hi again,

I forgot to say 2 things:

- I'm trying everything logged in as root with context 
root:sysadm_r:sysadm_t; each service then transitions to its own special 
domain (This definitely works according to "ps axZ" after startup in 
permissive mode).

- I also already disabled the dontaudits by "semodule -DB" in order to 
see all denied accesses.

Cheers,

    Chris



More information about the SELinux-devel mailing list