in.
It is not possible to relabel a process. To have a process run in a different domain, it might be possible to launch the command using the
runcon command. However, in the majority of cases, this will not be allowed by the SELinux policy. The domain in which a process runs is fully policy-driven (with a small configurable aspect provided for SELinux-aware applications).
Listing process labels
The standard core utilities can display the context of a process.
For instance, to get the context of the
ps -eZ | grep init
system_u:system_r:init_t 1 ? 00:00:01 init
Label management is one of the most core competences that a system administrator on a SELinux system must have. As SELinux decisions are based on labels (contexts), ensuring that the right context is used on all resources is a primary concern for all administrators.