From: Giorgio Zanin <giorgio.zanin@inwind.it>
To: Stephen Smalley <sds@tislabs.com>, selinux@tycho.nsa.gov
Subject: type transition
Date: Mon, 04 Nov 2002 20:29:54 +0100 [thread overview]
Message-ID: <3DC6CAB2.3070008@inwind.it> (raw)
what's the difference between the following statements:
type_transition TYPE_A TYPE_B:process TYPE_C
and
allow TYPE_A TYPE_C:process transition
?
If I am not wrong the first statement forces a new process, created by
TYPE_A, to belong to TYPE_C, i.e. everytime TYPE_A creates a process
(with respect to TYPE_B) this process is made member of TYPE_C.
The second statement allows TYPE_A to change to TYPE_C.
Does both occur upon an execve()? If so, what's the difference between
them? It seems the first requires a call to fork(), while the second
does not; probably I am wrong but it's the only difference I can argue.
Can anyone explain how these type transitions occur (possibly everything
about type transitions in SELinux....)?
Thanks
Giorgio
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
next reply other threads:[~2002-11-04 19:27 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-11-04 19:29 Giorgio Zanin [this message]
2002-11-05 14:49 ` type transition Wayne Salamon
-- strict thread matches above, loose matches on Subject: below --
2002-11-07 20:31 Stephen D. Smalley
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=3DC6CAB2.3070008@inwind.it \
--to=giorgio.zanin@inwind.it \
--cc=sds@tislabs.com \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.