* [SEMANAGE] nodecon
@ 2006-01-24 14:27 Chad Hanson
2006-01-25 16:48 ` Daniel J Walsh
2006-01-30 19:01 ` Ivan Gyurdiev
0 siblings, 2 replies; 5+ messages in thread
From: Chad Hanson @ 2006-01-24 14:27 UTC (permalink / raw)
To: Daniel J Walsh, Stephen Smalley; +Cc: Ivan Gyurdiev, SELinux List, dgoeddel
Hi,
Are there any plans for adding nodecon support to libsemanage? We would like
to request this functionality as we use the nodecon rules in our solutions.
We noticed this deficiency in examining our existing toolset and mapping the
functionality to libsemanage. It is crucial to manage the domains/labels of
hosts/networks.
Thanks,
-Chad
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: [SEMANAGE] nodecon
2006-01-24 14:27 [SEMANAGE] nodecon Chad Hanson
@ 2006-01-25 16:48 ` Daniel J Walsh
2006-01-30 19:01 ` Ivan Gyurdiev
1 sibling, 0 replies; 5+ messages in thread
From: Daniel J Walsh @ 2006-01-25 16:48 UTC (permalink / raw)
To: Chad Hanson; +Cc: Stephen Smalley, Ivan Gyurdiev, SELinux List, dgoeddel
Chad Hanson wrote:
> Hi,
>
> Are there any plans for adding nodecon support to libsemanage? We would like
> to request this functionality as we use the nodecon rules in our solutions.
> We noticed this deficiency in examining our existing toolset and mapping the
> functionality to libsemanage. It is crucial to manage the domains/labels of
> hosts/networks.
>
> Thanks,
> -Chad
>
>
Sounds good to me...
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: [SEMANAGE] nodecon
2006-01-24 14:27 [SEMANAGE] nodecon Chad Hanson
2006-01-25 16:48 ` Daniel J Walsh
@ 2006-01-30 19:01 ` Ivan Gyurdiev
2006-01-30 19:13 ` Stephen Smalley
1 sibling, 1 reply; 5+ messages in thread
From: Ivan Gyurdiev @ 2006-01-30 19:01 UTC (permalink / raw)
To: Chad Hanson; +Cc: Daniel J Walsh, Stephen Smalley, SELinux List, dgoeddel
Chad Hanson wrote:
> Hi,
>
> Are there any plans for adding nodecon support to libsemanage? We would like
> to request this functionality as we use the nodecon rules in our solutions.
> We noticed this deficiency in examining our existing toolset and mapping the
> functionality to libsemanage. It is crucial to manage the domains/labels of
> hosts/networks.
>
I can work on adding nodecon support to libsepol and libsemanage, if
that's agreed on (Stephen?)
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: [SEMANAGE] nodecon
2006-01-30 19:01 ` Ivan Gyurdiev
@ 2006-01-30 19:13 ` Stephen Smalley
2006-01-30 19:14 ` Daniel J Walsh
0 siblings, 1 reply; 5+ messages in thread
From: Stephen Smalley @ 2006-01-30 19:13 UTC (permalink / raw)
To: Ivan Gyurdiev; +Cc: Chad Hanson, Daniel J Walsh, SELinux List, dgoeddel
On Mon, 2006-01-30 at 14:01 -0500, Ivan Gyurdiev wrote:
> Chad Hanson wrote:
> > Hi,
> >
> > Are there any plans for adding nodecon support to libsemanage? We would like
> > to request this functionality as we use the nodecon rules in our solutions.
> > We noticed this deficiency in examining our existing toolset and mapping the
> > functionality to libsemanage. It is crucial to manage the domains/labels of
> > hosts/networks.
> >
> I can work on adding nodecon support to libsepol and libsemanage, if
> that's agreed on (Stephen?)
Yes, I agree that it would be useful.
--
Stephen Smalley
National Security Agency
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: [SEMANAGE] nodecon
2006-01-30 19:13 ` Stephen Smalley
@ 2006-01-30 19:14 ` Daniel J Walsh
0 siblings, 0 replies; 5+ messages in thread
From: Daniel J Walsh @ 2006-01-30 19:14 UTC (permalink / raw)
To: Stephen Smalley; +Cc: Ivan Gyurdiev, Chad Hanson, SELinux List, dgoeddel
Stephen Smalley wrote:
> On Mon, 2006-01-30 at 14:01 -0500, Ivan Gyurdiev wrote:
>
>> Chad Hanson wrote:
>>
>>> Hi,
>>>
>>> Are there any plans for adding nodecon support to libsemanage? We would like
>>> to request this functionality as we use the nodecon rules in our solutions.
>>> We noticed this deficiency in examining our existing toolset and mapping the
>>> functionality to libsemanage. It is crucial to manage the domains/labels of
>>> hosts/networks.
>>>
>>>
>> I can work on adding nodecon support to libsepol and libsemanage, if
>> that's agreed on (Stephen?)
>>
>
> Yes, I agree that it would be useful.
>
>
I think it is fine to do this, but I still believe this is more in the
realm of iptables then really the role of SELinux.
Dan
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2006-01-30 19:14 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-01-24 14:27 [SEMANAGE] nodecon Chad Hanson
2006-01-25 16:48 ` Daniel J Walsh
2006-01-30 19:01 ` Ivan Gyurdiev
2006-01-30 19:13 ` Stephen Smalley
2006-01-30 19:14 ` Daniel J Walsh
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.