Re: Running rc-service without run_init
Luis Ressel <[email protected]>
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Message-ID | <[email protected]> |
This patch makes run_init unneccessary for "normal" init scripts (those labeled initrc_exec_t). However, it's still neccessary for scripts with custom types, such as iptables. Looking at the openrc code clearly shows that rc-service doesn't make any attempt to transition to the correct domain (initrc_t) beforce execv()'ing the script. Are there any plans to change this? Regards, Luis -- Luis Ressel <[email protected]> GPG fpr: F08D 2AF6 655E 25DE 52BC E53D 08F5 7F90 3029 B5BD
signature.asc
(application/pgp-signature, 966 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQJ8BAEBCgBmBQJS5BUJXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRBMjU3MDBFQTc5QkYzMkY4NEQzMTFGNDlD NzE4OTFBNkEwRUZCN0U5AAoJEMcYkaag77fp+E4P/2dv2g/UUyNvkSFdVuOE4oOJ puUYHSKGSKJkk73/Uof3mgBBerPufb6e91oUcFdxeQ4rFAk1YTdcCmTr+omX6Na+ Nn5n/w4y7JgXb9txxk0+7qWn1IdM3tdTmLu9/NyB2cOCQrZlkyNabCOuFDafpYXX +sE9Xl/BFDGFKm4trh4UpNofvTNlVKNc1nE7uIgztoQhU5ToXmFnZRuBfWBKyN0V a6b3qnxZUo5L3Unn0RXIexpzPfPU0k00QKCqeRefP8y90k4hzvh/1vjesTKKp532 vp2VFJjaF3qTJ/S5ICqQgE2ginPXERyV4wyQwD4K2mtVx30unpn38Kx1LFg8hBFW EGlOMqj94PJsxvS2IzkDGoeDneqoiH4A7cxo9QT6oB8wpSSV2wB9unxPPKBzdmbC qrAmIU0oxo0vO+7EsdoqAHXlzAyZSia23MBwIZUUVH2GdzgsCbdYgNiADSf98h3w YXfp0ZXDX38dZx+859NTHivYHiNWnZE5mNjK90YwH4AuS1dU3CbX+3upye0pQJi3 vRaAEaC0JkXgO+oaXeBNLQ8tStQl9fHy2F4KOquPL+QEnd24JZYyRTQe+HRwHFkA yft1Xoobe0evl9bsHEZ1a86VlgfLBTNKi3ZfclmWYtAeuVdV3vf6GhQeIjCJKdcb eQ0KOJ/HYF9gsG1IgIRE =vfGK -----END PGP SIGNATURE-----