Re: init running at s9 by default on a MLS system?

[Paul Moore <paul.moore@hp.com>]

Jonathan Kim wrote:
> Yes the line is updated originally by TCS and wrapped with mls_policy
> tunable later. 
> 
> I applied current Dan Walsh's selinux-policy-mls-1.25.2-5 on on Fedora
> Rawhide to FC4 and I see the init process is running correctly at
> s0-s9:c0.c127.
> 

I am running version 1.25.2-5 of Dan's MLS policy RPM and looking at the 
source version of the policy RPM I see the range_transition line and if 
I recompile the policy the line is present in the policy.conf file.

However, if I reboot the machine using either the policy that I have 
recompiled or Dan's original policy it appears that init is running in 
system_u:system_r:init_t:s9:c0.c127 not s0-s9:c0.c127.

Am I missing something?

> 
>>-----Original Message-----
>>From: Daniel J Walsh [mailto:dwalsh@redhat.com]
>>Sent: Tuesday, July 19, 2005 1:58 PM
>>To: Chad Hanson
>>Cc: Paul Moore; selinux@tycho.nsa.gov
>>Subject: Re: init running at s9 by default on a MLS system?
>>
>>
>>Chad Hanson wrote:
>>
>>
>>>>How do you specify in policy that kernel_t transitions to 
>>>>init_t but at 
>>>>level s0?
>>>>
>>>>   
>>>>
>>>
>>>Like as follows:
>>>
>>># run init_t at OS_LO-OS_HI
>>>range_transition kernel_t init_exec_t s0 - s9:c0.c127;
>>>
>>>-Chad
>>> 
>>>
>>
>>That line is already in policy.
>>
>>-- 
>>
>>
>>
>>--
>>This message was distributed to subscribers of the selinux 
>>mailing list.
>>If you no longer wish to subscribe, send mail to 
>>majordomo@tycho.nsa.gov with
>>the words "unsubscribe selinux" without quotes as the message.
>>
> 
> 


-- 
. paul moore . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
. paul.moore@hp.com                                      hewlett packard
. (603) 884-5056                                          linux security

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.