[refpolicy] about MLS!

[refpolicy] about MLS!

[徐宁]

hello,everyone:
    I have used refpolicy 2.20081210 to test selinux on my Linux ver 2.6.18,but some matter when i use " TYPE = mls":
1. is selinux mls support x windows?
2. i found the roles include "secadm auditadm", but how to login from secadm_r or auditadm_r? 
     thanks a lot


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://oss.tresys.com/pipermail/refpolicy/attachments/20090504/ec8d6af2/attachment.html 

[refpolicy] about MLS!

[Chris PeBenito]

On Mon, 2009-05-04 at 19:21 +0800, ?? wrote:
> hello,everyone:
>     I have used refpolicy 2.20081210 to test selinux on my Linux ver 2.6.18,but some matter when i use " TYPE = mls":
> 1. is selinux mls support x windows?

The X policy with MLS in refpolicy has had little testing, though people
are working on it.

> 2. i found the roles include "secadm auditadm", but how to login from secadm_r or auditadm_r? 
>      thanks a lot

You need to add the role to your seuser, or create a new seuser which is
allowed the role.

-- 
Chris PeBenito
<pebenito@gentoo.org>
Developer,
Hardened Gentoo Linux
 
Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
Key fingerprint = B0E6 877A 883F A57A 8E6A  CB00 BC8E E42D E6AF 9243
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20090504/f2345fe8/attachment.bin