All of lore.kernel.org
 help / color / mirror / Atom feed
From: "T S" <t_mail@mail2Airport.com>
To: <selinux@tycho.nsa.gov>
Subject: Question about XACE/X-SELinux
Date: Tue, 17 Jun 2008 05:50:17 -0700	[thread overview]
Message-ID: <07a701c8d078$b15798a0$046a010a@mail2world.com> (raw)

[-- Attachment #1: Type: text/plain, Size: 1674 bytes --]

Hello,

I just want to try functionalities X-SELinux, such as prohibiting cut
and paste.
Since the below changelog(URL) says X-SELinux functionalities are turned
off by default, 
I think I need to turn on at first. 
I appreciate someone tell me how to turn on.
> http://lwn.net/Articles/283539/

I am using Fedora Core9, xorg-server-Xorg-1.4.99.902-3.20080612,
and GNOME( meaning just after FC9 and yum update).

I thought X-SELinux functionalities are turned on by default in FC9,
so I tried the below steps.
1) setsebool xserver_object_manager=true
2) insert loadable module like below. because I was expecting
some avc logs were generated if I tried cut and paste.

> policy_module(test, 1.0.0)
> gen_require(`
> attribute domain;
> class x_synthetic_event { send receive };
>')
>auditallow domain domain:x_synthetic_event {send receive};

3) setenforce 1
4) reboot GNOME( init 3 and init 5)
5) trying cut&paste from a window to others. No avclogs are found.
Only found "Loading extension SELinux" in /var/log/Xorg.0.org.

I appreciate someone tell me what I am missing here.

Regards,
K



Need cash? Click to get an emergency loan, bad credit ok
<http://tagline.bidsystem.com/fc/Ioyw36XHxOdtlQEyiBy8w8bGOQx9ugfZFBGL7xG
NpWaG9Vx6r3wVdx/> 



<span id=m2wTl><p><font face="Arial, Helvetica, sans-serif" size="2" style="font-size:13.5px">_______________________________________________________________<BR>Get the FREE email that has everyone talking at <a href=http://www.mail2world.com target=new>http://www.mail2world.com</a><br>  <font color=#999999>Unlimited Email Storage &#150; POP3 &#150; Calendar &#150; SMS &#150; Translator &#150; Much More!</font></font></span>

[-- Attachment #2: Type: text/html, Size: 2075 bytes --]

             reply	other threads:[~2008-06-17 12:50 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2008-06-17 12:50 T S [this message]
2008-06-17 14:09 ` Question about XACE/X-SELinux Xavier Toth
  -- strict thread matches above, loose matches on Subject: below --
2008-06-18 14:34 T S

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to='07a701c8d078$b15798a0$046a010a@mail2world.com' \
    --to=t_mail@mail2airport.com \
    --cc=selinux@tycho.nsa.gov \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.