From mboxrd@z Thu Jan 1 00:00:00 1970 Message-ID: <3FC4D43B.1020105@redhat.com> Date: Wed, 26 Nov 2003 11:26:35 -0500 From: Daniel J Walsh MIME-Version: 1.0 To: Stephen Smalley CC: SELinux , Russell Coker Subject: Re: Problems with /dev/tty on reboot. References: <3FC4AF2B.3060301@redhat.com> <1069856081.30315.55.camel@moss-spartans.epoch.ncsc.mil> <3FC4BDD3.8090504@redhat.com> <1069860803.30315.78.camel@moss-spartans.epoch.ncsc.mil> In-Reply-To: <1069860803.30315.78.camel@moss-spartans.epoch.ncsc.mil> Content-Type: multipart/alternative; boundary="------------020002080109010604000307" Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov This is a multi-part message in MIME format. --------------020002080109010604000307 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Stephen Smalley wrote: >On Wed, 2003-11-26 at 09:50, Daniel J Walsh wrote: > > >>Ok, moving the ifdef(`dpkg.te') rule allowed login to relabel the tty >>and me to login, but should we still make the change to getty to >>relabel the tty? If yes, how should getty determine what context to >>set the tty too? Do we need to add something to default_contexts or >>is there another way to determine this? >> >> > >If getty already resets the ownership, then it makes sense to also patch >it to reset the context. It can pull a single context from a config >file like run_init does, or this could be the time to create that >libselinux function that returns the matching context from the file >contexts configuration for a given pathname... > > Well we need this function anyways if rpm is going to set default contexts for files... Dan --------------020002080109010604000307 Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: 7bit Stephen Smalley wrote:

On Wed, 2003-11-26 at 09:50, Daniel J Walsh wrote:

Ok, moving the ifdef(`dpkg.te') rule allowed login to relabel the tty
and me to login, but should we still make the change to getty to
relabel the tty?  If yes, how should getty determine what context to
set the tty too?  Do we need to add something to default_contexts or
is there another way to determine this?


If getty already resets the ownership, then it makes sense to also patch
it to reset the context.  It can pull a single context from a config
file like run_init does, or this could be the time to create that
libselinux function that returns the matching context from the file
contexts configuration for a given pathname...

Well we need this function anyways if rpm is going to set default contexts for files...
Dan
--------------020002080109010604000307-- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.