2008-12-01 22:32:22

by Justin P. Mattock

Subject: [refpolicy] the new way of newrole

Hello;
this new policy(svn) is killing me over here...
Am I supposed to be startingx
like this:(after login a command prompt)
newrole -r staff_r -- -c /usr/bin/startx
if so how do I change dbus to run the right context?


--
Justin P. Mattock <[email protected]>

2008-12-02 19:30:46

by cpebenito

Subject: [refpolicy] the new way of newrole

On Mon, 2008-12-01 at 14:32 -0800, Justin P. Mattock wrote:
> Hello;
> this new policy(svn) is killing me over here...
> Am I supposed to be startingx
> like this:(after login a command prompt)
> newrole -r staff_r -- -c /usr/bin/startx

No, this won't work. Newrole can only transition to user domains (eg
staff_t) and only by executing a shell.

--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150