Re: automatic type transitions for pts in devfs

[Debian User <rogelio@evoworks.evoserve.com>]

Stephen Smalley wrote:

>On Thu, 11 Jul 2002, Debian User wrote:
>
>  
>
>>my patch works with russell's devfsd-se.so disabled. just remove any selinux*
>>file in /etc/devfs/conf.d. i will see if removing only the pts entry in the selinux
>>conf.d file will work.
>>    
>>
>
>This makes sense.  As long as devfsd does not intercept the registration
>of pts nodes and perform a lookup at that time, your patch should work for
>labeling pts nodes with transition SIDs.
>
>This is good, as it removes the immediate need to patch devfsd.  However,
>it will still be necessary to patch the kernel devfs code to preserve SIDs
>on devfs entries when they are evicted from the dcache.
>
The system im building from scratch is working perfectly booting in 
enforcing mode without devfsd. I am fine tuning the policy now.

Im having a problem with my X Window devpts entries.  The task sid when 
X Window creates a pty is xdm_t. What should the proper type be? Ssh 
works perfectly now in enforcing mode. X stops when I switch to 
enforcing mode. What are the type transitions when gdm starts X window?

>--
>Stephen D. Smalley, NAI Labs
>ssmalley@nai.com
>
>
>  
>




--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.