Re: Question on networking accesses

[Paul Moore <paul.moore@hp.com>]

On Monday, May 21 2007 9:48:52 am Casey Schaufler wrote:
> I have what I hope is a fairly straitforward question on the SELinux
> networking model. Let's pretend that I have a process A that sends a
> UDP packet P to a second process B. From the viewpoint of access control
> is this:
>
>     - process A writing to process B
>     - process B reading from process A
>     - process A creating packet P, and process B reading packet P
>
> some combination of the above, or something else entirely?

>From 10,000 feet up in the air that sounds roughly about right.  Although if 
you are talking about labeled networking it can be a bit more involved, 
especially if you are using labeled IPsec.

Can you be a bit more specific?

-- 
paul moore
linux security @ hp


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.