Markus Bartl wrote:
Hi there.
Ive got my SELinux kernel up and running.
What im wondering about is that i can restart services without changing
to the sysadm_r role.
Are you prompted for the root password when you execute one
of the init.d scripts? And are you in permissive mode or
enforcing mode?
In general, a *lot* of strange problems with SELinux are
caused by mislabeled file systems. If certain executables
aren't labeled correctly, even in permissive mode, it will
prevent the correct transitions from happening and produce
odd symptoms later on. One common symptom of this is the rc
system not cooperating with SELinux.
I would suggest you relabel everything: rlpkg -a -r
then reboot and see if your behavior is more what you expected.
--K
