Closed as not planned
Description
Describe the bug
When SELinux is Enforcing, scripts started by systemd
need the initrc_exec_t
context set. It is not currently.
To Reproduce
Steps to reproduce the behavior:
-
Have SELinux Enforcing;
-
Add a runner;
-
Run
./svc.sh install
-
Observe that
systemd
failed to start the script:sudo grep -i denied /var/log/audit/audit.log|grep -i svc|tail -1|fold -s
type=AVC msg=audit(1642053001.589:304): avc: denied { execute } for pid=14114 comm="(unsvc.sh)" name="runsvc.sh" dev="vda1" ino=25325969 scontext=system_u:system_r:init_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=0
Expected behavior
systemd
should be able to start the script.
Runner Version and Platform
- Version:
2.278
- OS: Linux (x64)
/cc: @mikedalton