Re: libselinux category patch

[Daniel J Walsh <dwalsh@redhat.com>]

Stephen Smalley wrote:

>On Wed, 2005-08-24 at 09:27 -0400, Daniel J Walsh wrote:
>  
>
>>I still want at least the set_comp diff to allow me to set level to 
>>NULL, so it does not show up.
>>    
>>
>
>Hmm...I dropped the set_comp diff entirely from the original patch
>because I didn't want the change to allow whitespace in the context, as
>per our earlier discussion on the list.  I didn't notice that you were
>also changing it to allow NULL.  Potential issue there is that your
>change would allow setting a NULL for any field, whereas context_str
>won't handle a NULL gracefully in any field other than the last.
>
>  
>
Which is too bad since object_r is totally useless in ls output :^).    
Well we can either make sure it is that last field or not allow it.  As 
I play with MCS, I am not sure whether we want this info or not, my 
problem with this field and object_r is that they give no info and take 
up a lot of screen space.  (Although, probably an Engineer problem and 
not a real world problem.)

>With regard to clearing the context pointers on entry to the raw
>functions, I don't see why it is necessary given my earlier patch.
>
>  
>
Ok, you can forget about them.

-- 



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.