re: id -Z subsumed by secon?

[Janak Desai <janak@us.ibm.com>]

On Tue, 2006-08-08 at 14:58 -0400, Daniel J Walsh wrote:
> >
> >
> > James Antill <james.antill@redhat.com> wrote:
> >   
> >> >  No, what Steven was saying is that the label for execcon will be reset
> >> > on exec (after doing it's thing). To see this visually use "secon
> >> > --self-exec" instead of id.
> >> >
> >> > % secon
> >> > user: user_u
> >>     
> > ...
> >
> > Thanks for the example.
> >
> > By the way, doesn't secon make id's -Z option unnecessary?
> > I'm planning not to include the 'id -Z' patches upstream,
> > Instead, runcon (with neither CONTEXT nor COMMAND) will
> > print the current security context -- to be analogous to how nice(1)
> > works if you don't give it a command.
> >
> > Any objection?
> >
> >
> >   
> Yes I would like to maintain the idea of "-Z" being the way to view 
> contexts.  This makes it easy for
> a user to figure out how to see what context is being used.  ls -Z, ps 
> -Z, netstat -Z ...
> 
> 

We are also using "id -Z" in our evaluation tests and would like to
keep the option.

-Janak

> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
> the words "unsubscribe selinux" without quotes as the message.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.