From c5cbefb892fcc2ffc622d7241171f73b1fb5b490 Mon Sep 17 00:00:00 2001 From: Sven Vermeulen Date: Sat, 3 Sep 2011 16:20:41 +0200 Subject: [PATCH] Gentoo integrated run_init support re-executes rc When an init script is launched, Gentoo's integrated run_init support will re-execute /sbin/rc (an all-in-one binary) for various functions. The run_init_t domain here should not be allowed to transition yet, so we allow it to execute /sbin/rc without transitioning. Signed-off-by: Sven Vermeulen --- policy/modules/system/selinuxutil.te | 2 ++ 1 file changed, 2 insertions(+) diff --git a/policy/modules/system/selinuxutil.te b/policy/modules/system/selinuxutil.te index 508b206d6..29811220d 100644 --- a/policy/modules/system/selinuxutil.te +++ b/policy/modules/system/selinuxutil.te @@ -406,6 +406,8 @@ ifndef(`direct_sysadm_daemon',` ifdef(`distro_gentoo',` # Gentoo integrated run_init: init_script_file_entry_type(run_init_t) + + init_rc_exec(run_init_t) ') ')