Re: Context translation and MLS categories

[Ivan Gyurdiev <ivg2@cornell.edu>]

>> What do I present to the user if they want their file accessible by 
>> s0:c0, and s0:c3, but not the other two.
>>     
>
> It doesn't work that way - it isn't an ACL.  s0:c0,c3 means that the
> file can only be accessed by processes with both c0 and c3 in its
> low/sensitivity level (or high/clearance level in the MCS case).  Adding
> a category to a file further restricts who can access it - it isn't
> additive.
>   
Okay... so I am completely misunderstanding this.
That's good to know, before I make critical design mistakes.

I blame James Morris' howto :)
It has no examples with more than one category marked on a file.
============

Okay, how about....

1) We translate the entire range when displaying
2) When modifying the range, we unroll the user's range as (s,c) pairs, 
then translate each of them, and present them as required clearances to 
be added or removed
3) When the range is displayed again, re-translate the whole thing.
============



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.