Re: Multiple contexts

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

On Thu, Jan 13, 2005 at 11:37:18AM -0500, Stephen Smalley wrote:
> On Thu, 2005-01-13 at 11:48, Luke Kenneth Casson Leighton wrote:
> >   i believed that it would be acceptable to have as part of the
> >   intermediate stage a full filesystem traversal, but as i mentioned
> >   in the reply to james, i woke up with an insight into a flaw of
> >   what i am advocating and cannot now remember what it is!
> 
> Having to analyze the complete filesystem state:
> 1) doesn't scale.  Think of a site with millions of files.

 ... setfiles?

> 2) isn't stable.  Think of runtime changes occuring all the time as
> files are created, destroyed, relabeled, etc.
> 
> In any event, I consider the topic (of multiple contexts per object)
> closed.
 
 ack.  likewise.  wish i could remember what the flaw was.



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.