Re: [ PATCH ] Cumulative patch - various fixes, untrusted_content_t, mozilla, gnome types

[Ivan Gyurdiev <ivg2@cornell.edu>]

I've been busy with school, and no time to work on this - 
filed bugs to keep track of things:

Here's new patch version, with policy attempt for GConf:

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=155800

Here are related problems. I am very interested in the solution
for the first one, at least.

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=155799
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=155798
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=155796


>> 1) Introduces new type - ROLE_untrusted_content_t.
>> This will be the "downloads" folder type that I proposed earlier.
>> I started a discussion on the Gnome Usability list about further
>> separation, but so far it doesn't seem to be making progress.

> This is a difficult area that requires a lot of thought and work if we are to 
> have a chance to get it right.  Let's leave this until after we get some of 
> the base stuff done.

Can you list some of the things that need to be done?
I thought it would be sufficient to create a default downloads folder
for the user that is sufficiently visible (integrated w/ desktop
environments)

-- 
Ivan Gyurdiev <ivg2@cornell.edu>
Cornell University


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.