Re: [gentoo-hardened] Domain Transition problems wpa -> anything else

[Chris PeBenito]

On Sun, 2008-03-09 at 09:43 -0400, Mike Edenfield wrote:
> I've almost got my wpa policy module working properly, but something I
> did along the way is causing the startup scripts to act kinda strange.
> The wpa processes are now running under the domain I defined for them,
> but so are a bunch of other network daemon processes that launch after WPA:
>
> system_u:system_r:wpa_t          3944 ?        Ss     0:00 /sbin/wpa_supplicant -c/etc/wpa_supplicant/wpa_supplicant.conf -C/var/run
> system_u:system_r:wpa_t          3955 ?        Ss     0:00 /bin/wpa_cli -a/etc/wpa_supplicant/wpa_cli.sh -p/var/run/wpa_supplicant -
> system_u:system_r:wpa_t          6834 ?        Ss     0:00 sshd: kutulu [priv]
> system_u:system_r:wpa_t          6836 ?        S      0:00 sshd: kutulu@pts/0

What did you do to fix the transition to get to wpa_t?  Was it the same
as my other response?  If starts/stops services based on network
availability, you'd probably want a transition back to initrc_t
(init_domtrans_script(wpa_t)).  Thats assuming it uses the init scripts
to control the services.

-- 
Chris PeBenito
<pebenito@g.o>
Developer,
Hardened Gentoo Linux
 
Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
Key fingerprint = B0E6 877A 883F A57A 8E6A  CB00 BC8E E42D E6AF 9243