Bug 431654 – Allow sysadm the necessary rights for named init scripts

• Status: VERIFIED FIXED
• Product: Gentoo Linux

[Description Sven Vermeulen (RETIRED) 2012-08-16 17:02:40 UTC]

Since 20120725-r2 and higher, named init scripts are now almost mandatory to use. If an init script is labeled <domain>_initrc_exec_t, then this is a named init script. This bug will be used to track the various domains for which sysadm_t doesn't have the proper rights to work with the named init script yet.

A workaround is to label the file "initrc_exec_t", but this is not in line with the purpose of the named init scripts.

Reproducible: Always

[Comment 1 Sven Vermeulen (RETIRED) 2012-08-16 17:03:19 UTC]

Domains:

- postgresql
- asterisk

[Comment 2 Sven Vermeulen (RETIRED) 2012-08-16 18:50:36 UTC]

More domains:

- openvpn
- ntp
- bind

[Comment 3 Sven Vermeulen (RETIRED) 2012-08-25 17:15:08 UTC]

Domains:

- consolekit (/run/ConsoleKit)

[Comment 4 Sven Vermeulen (RETIRED) 2012-09-08 18:16:38 UTC]

rev 5 is in hardened-dev overlay

(for newly found domains needing this, please open a new bugreport)

[Comment 5 Sven Vermeulen (RETIRED) 2012-09-22 11:31:06 UTC]

In main tree, ~arch'ed (rev 5)

[Comment 6 Sven Vermeulen (RETIRED) 2012-10-04 18:34:38 UTC]

stabilized