-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

On 01/14/2011 10:22 AM, Philippe Naudin wrote:

Hello,

Running httpd-2.2.3-43.el5.centos.3 on CentOS release 5.5 (Final), I have :

$ ps -Ze LABEL PID TTY TIME CMD user_u:system_r:httpd_t 12833 ? 00:00:00 httpd

Is it normal for httpd to have this context (user_u:system_r:httpd_t) ? I was expecting system_u:system_r:httpd_t.

And if it is not normal, is it because I have restarted httpd by hand (service httpd restart), or because I have broken something in my configuration ?

Thanks,

Yes this is normal, this indicates that some one running as user_u, restarted the daemon. system_u would indicate that it was started at boot.

The user component of SELinux is pretty much ignored when it comes to access control.