![]() | 1 | initial version |
My guess is you can run a service (a process) in unconfined mode. Example:
chcon -t unconfined_exec_t /usr/sbin/httpd
http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Security-Enhanced_Linux/sect-Security-Enhanced_Linux-Targeted_Policy-Unconfined_Processes.html
I am not sure if this is what you want, I can only guess it is not much secure to do it in production...