From: Joshua Brindle <jbrindle@snu.edu>
To: Stephen Smalley <sds@epoch.ncsc.mil>
Cc: Russell Coker <russell@coker.com.au>, SE Linux <selinux@tycho.nsa.gov>
Subject: Re: identity
Date: Mon, 23 Feb 2004 13:32:28 -0600 [thread overview]
Message-ID: <403A554C.2040000@snu.edu> (raw)
In-Reply-To: <1077546531.18234.33.camel@moss-spartans.epoch.ncsc.mil>
Stephen Smalley wrote:
> On Sun, 2004-02-22 at 23:35, Russell Coker wrote:
>
>>One of the benefits of the SE Linux identity is that it tracks the originating
>>user through all operations that they perform.
>
>
> Caveat: This is no longer entirely true, as 'su' is now using
> pam_selinux and transitions to other user identities.
>
Why was this decided, one of the main selling points of selinux was that
the identity is always preserved, why back away from this concept?
From talking to pebenito we aren't going to implement this at all in
Gentoo, I'm wondering why others want to implement it.
Joshua Brindle
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
next prev parent reply other threads:[~2004-02-23 19:32 UTC|newest]
Thread overview: 21+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-02-23 4:35 identity Russell Coker
2004-02-23 6:02 ` identity Joseph Pingenot
2004-02-23 6:22 ` identity Russell Coker
2004-02-23 14:47 ` identity Joseph Pingenot
2004-02-23 17:14 ` identity Joshua Brindle
2004-02-24 1:02 ` identity Russell Coker
2004-02-23 13:50 ` identity Stephen Smalley
2004-02-23 23:54 ` identity Russell Coker
[not found] ` <200402240308.i1O38Nu6011811@turing-police.cc.vt.edu>
2004-02-24 7:07 ` identity Russell Coker
2004-02-23 14:28 ` identity Stephen Smalley
2004-02-23 19:32 ` Joshua Brindle [this message]
2004-02-23 19:55 ` identity Stephen Smalley
2004-02-24 0:41 ` identity Russell Coker
2004-02-24 14:47 ` identity James Morris
2004-02-24 14:57 ` identity Stephen Smalley
2004-02-24 20:03 ` [selinux] identity Magosányi Árpád
2004-02-24 20:41 ` Stephen Smalley
2004-02-24 22:45 ` Joshua Brindle
2004-02-25 19:51 ` Rik Faith
2004-02-24 22:50 ` identity Russell Coker
[not found] <20040223140412.BBXY2010.viefep15-int.chello.at@localhost>
2004-02-24 1:00 ` identity Russell Coker
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=403A554C.2040000@snu.edu \
--to=jbrindle@snu.edu \
--cc=russell@coker.com.au \
--cc=sds@epoch.ncsc.mil \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.