* Any problems with adding the following.
@ 2005-01-31 22:13 Daniel J Walsh
2005-02-01 12:55 ` Stephen Smalley
0 siblings, 1 reply; 2+ messages in thread
From: Daniel J Walsh @ 2005-01-31 22:13 UTC (permalink / raw)
To: Stephen Smalley, SELinux
/opt/.*\.so(\.[^/]*)* -- system_u:object_r:shlib_t
/usr/local/.*\.so(\.[^/]*)* -- system_u:object_r:shlib_t
Third party vendors do not always put sharelibaries under a "lib/"
directory.
Dan
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Any problems with adding the following.
2005-01-31 22:13 Any problems with adding the following Daniel J Walsh
@ 2005-02-01 12:55 ` Stephen Smalley
0 siblings, 0 replies; 2+ messages in thread
From: Stephen Smalley @ 2005-02-01 12:55 UTC (permalink / raw)
To: Daniel J Walsh; +Cc: SELinux
On Mon, 2005-01-31 at 17:13, Daniel J Walsh wrote:
> /opt/.*\.so(\.[^/]*)* -- system_u:object_r:shlib_t
> /usr/local/.*\.so(\.[^/]*)* -- system_u:object_r:shlib_t
>
> Third party vendors do not always put sharelibaries under a "lib/"
> directory.
Only question is whether these shared libraries should have a separate
type, so that we can limit execution of them to the third party
applications and not for any privileged applications in the base OS.
--
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2005-02-01 12:55 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2005-01-31 22:13 Any problems with adding the following Daniel J Walsh
2005-02-01 12:55 ` Stephen Smalley
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.