Re: depinit

[Luke Kenneth Casson Leighton <lkcl@xxxxxxxx>]

On Mon, May 23, 2005 at 01:58:46PM -0400, Valdis.Kletnieks@xxxxxx wrote:

> On Mon, 23 May 2005 18:14:22 BST, Luke Kenneth Casson Leighton said:
> 
> >  there _is_ no "start" option or "stop" option to the service
> >  startup scripts.  if the script dies, the service is assumed to have
> >  died: the signal is caught by depinit (all signals are caught by
> >  depinit) and an "action" script e.g. /etc/depinit/sig_chld is called.
> >  
> >  if you _want_ the service to stop, you get depinit to automatically
> >  send increasingly aggressive levels of signals to the "service" script.
> > 
> >  there _is_ no stupid numbering schemes - not the stupid symlinks, and
> >  not the stupid runlevels.
> 
> This is actually irrelevant (mostly) as far as SELinux is concerned..
> 
> >  everything is _named_.  properly.
> 
> Again, mostly irrelevant..

 *whew*.

> >  the present policy - init.te, initrc.te - is therefore going
> >  to be mostly irrelevant.
> 
> Actually *looking* at the .te's shows that *most* of it will, in fact,
> still be applicable for *any* init-replacment.  The *important* part is
> that the policy address things like "can the init-process access these
> resources?" 

 okay.   much appreciated.
 
 i have a bit more confidence to try it :)

 l.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.