Re: [PATCH 2/2] NetLabel: enable dynamic activation/deactivation of NetLabel/SELinux enforcement

[Paul Moore <paul.moore@hp.com>]

On Saturday 14 July 2007 10:09:48 am James Morris wrote:
> On Fri, 13 Jul 2007, Paul Moore wrote:
> > Create a new NetLabel KAPI interface, netlbl_enabled(), which reports on
> > the current runtime status of NetLabel based on the existing
> > configuration.  LSMs that make use of NetLabel, i.e. SELinux, can use
> > this new function to determine if they should perform NetLabel access
> > checks.  This patch changes the NetLabel/SELinux glue code such that
> > SELinux only enforces NetLabel related access checks when
> > netlbl_enabled() returns true.
>
> This should be the first patch, so a git-bisect doesn't break userspace.
> (I can re-order them for merge, as long as they apply ok in that order).

That is fine with me.  I suspect you might run into problems merging the 
patches for security/selinux/netlabel.c in reverse order, if that is the case 
let me know and I can respin the patchset for you.

-- 
paul moore
linux security @ hp

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.