Re: setfiles and non-SE systems

[Dale Amon <amon@vnl.com>]

On Mon, Dec 01, 2003 at 09:42:23AM -0500, Stephen Smalley wrote:
> Right, if the xattr handlers for the security namespace were added to
> the EA/ACL patches, then you could assign the security.selinux
> attributes on a kernel with only those patches.  However:
> - that still requires a patched kernel (unless those patches
> get upstreamed to mainline 2.4)
> - If you are going to build a patched kernel, then you might as
> well build a SELinux kernel and just boot with selinux=0 to perform the
> initial labeling.  Same end result, a kernel that has the xattr handler
> but isn't running SELinux.

Point taken. I probably could live with that... 

Question though: I take it that all that is needed is
the EA/ACL security attributes. Like the handler
I did for reiserfs I take it? 

Anyway Steve, thanks for the ideas. I'm going to go
off and look into approaches based on the above and
see if it works out for me.

-- 
------------------------------------------------------
   Dale Amon     amon@islandone.org    +44-7802-188325
       International linux systems consultancy
     Hardware & software system design, security
    and networking, systems programming and Admin
	      "Have Laptop, Will Travel"
------------------------------------------------------

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.