Start tincd inside sub-shell to switch selinux context to "u:r:init_s…

…hell:s0". Fixes #26.
Vilbrekin · Dec 15, 2014 · bb562d8 · luckyhacky · Dec 26, 2014 · bb562d8
1 parent 526a20f
commit bb562d8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/org/poirsouille/tinc_gui/TincdService.java b/src/org/poirsouille/tinc_gui/TincdService.java
@@ -207,7 +207,7 @@ public void run()
                     // Register a broadcast receiver to get notified on network state change
                     _broadcastReceiver.register();
                     // Use exec to replace shell with executable. umask is used to ensure pidfile will be world readable.
-                    TincdService.this.run("umask 022; exec " + getFileStreamPath(TINCBIN) + " -D -d" + _debugLvl + " -c " + _configPath + " --pidfile=" + getFileStreamPath(PIDFILE), TincdService.this);
+                    TincdService.this.run("sh -c'umask 022; id; exec " + getFileStreamPath(TINCBIN) + " -D -d" + _debugLvl + " -c " + _configPath + " --pidfile=" + getFileStreamPath(PIDFILE) + "'", TincdService.this);
                     // Process returns only when ended
                     _started = false;
                     _broadcastReceiver.unregister();