From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Tue, 02 Dec 2008 14:30:46 -0500
Subject: [refpolicy] the new way of newrole
In-Reply-To: <1228170742.2966.6.camel@unix>
References: <1228170742.2966.6.camel@unix>
Message-ID: <1228246249.9691.32.camel@gorn>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Mon, 2008-12-01 at 14:32 -0800, Justin P. Mattock wrote:
> Hello;
> this new policy(svn) is killing me over here... 
> Am I supposed to be startingx
> like this:(after login a command prompt)
> newrole -r staff_r -- -c /usr/bin/startx

No, this won't work.  Newrole can only transition to user domains (eg
staff_t) and only by executing a shell.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150