On Mon, Aug 22, 2011 at 12:25:32PM -0500, Matt Thode wrote:
> I know this is not ideal, but can you simply allow sysadm_r to use rc-service
> and it's brothers?
Doesn't it already?
~# id -Z
root:sysadm_r:sysadm_t
~# rc-service postfix status
Authenticating root.
Password:
* status: started
Unless you mean to support it without asking for re-authentication. In that
case, check out bug #365761. It contains a "fix" for this if you prepend
your runscript activities with run_init. However, it seems not to support
the use of rc-service though.
Wkr,
Sven Vermeulen