Re: about security contexts for objects

[Giorgio Zanin <selinux_list@yahoo.it>]

Stephen Smalley wrote:

>>Look at the policy for all types that have the attribute file_type, that 
>>should catch all of them.
>>

Actually file_type, as it is just an attribute with no semantics with 
respect to the configuration language, is not the thing I would look at.
I mean, attributes are just names associated with types with no 
semantics from a language point of view. What I need is something with 
semantics in the configuration language context.
I wouldn't use attributes values fot infering any property of a 
configuration, becouse I can think at an attribute just as a collection 
of types (attributes are useful but they are not necessary).

>>Not all of them.  The file_type attribute is limited to files associated
>>with conventional (disk-based) filesystems and is used in allow rules
>>permitting the association of such types with those filesystems.  It
>>doesn't cover types associated with pseudo filesystems.
>>
what are exactly all the kinds of pseudo files? Do they cover every  
object class  other than  file-related ones (file, filesystem, dir, 
fifo_file, ...) and process?

Giorgio



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.