Re: Multiple contexts

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

On Wed, Jan 12, 2005 at 01:03:02PM -0500, Stephen Smalley wrote:
> On Wed, 2005-01-12 at 13:18, Luke Kenneth Casson Leighton wrote:
> >  sorry.
> > 
> >  something simple:
> > 
> >  i am thinking along the lines of more than one file context being
> >  associated with a file - that sort of thing.
> > 
> >  and permission being checked and allowed on either of the contexts.
> 
> I already explained why you don't want that - it puts the policy into
> the filesystem state.
 
 i don't believe it does - or i am misunderstanding.

 having two policy files apache.fc and mymodifiedthing.fc which _both_
 have a file context for the same file / directory, such that the
 data that ends up in the security.selinux xattr is "apache_filetype_t,
 "mymodifiedthing_filetype_t" doesn't mean, in my book "policy is in
 filesystem state".

 ... does it?

 *lost*.

 l.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.