[redhat-lspp] runcon in mls-enforcing

[Daniel J Walsh]

Matt Anderson wrote:
> Is runcon intended to be used on an MLS system?  Its bin_t and I don't
> see any policy for it included anywhere.  Is this a targeted policy only
> program?
>
> -matt
>
> --
> redhat-lspp mailing list
> redhat-lspp at redhat.com
> https://www.redhat.com/mailman/listinfo/redhat-lspp
>   
It is really a test program.  Does not work in enforcing mode on 
targeted either.

You can use it to test out a policy via a shell

setenforce 0
runcon -t httpd_t sh
setenforce 1