* Strange behaviour in MLS Policy
@ 2006-03-13 20:46 Daniel J Walsh
2006-03-13 20:56 ` Stephen Smalley
0 siblings, 1 reply; 2+ messages in thread
From: Daniel J Walsh @ 2006-03-13 20:46 UTC (permalink / raw)
To: Stephen Smalley, SE Linux
Any idea why devpts in MLS is mounting at SystemHigh?
I see no reason in policy that this would happen.
From reading policy I believe it should be mounting at SystemLow, the
same way tmpfs does.
The goal is to get it to mount at SystemLow-SystemHigh.
Dan
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Strange behaviour in MLS Policy
2006-03-13 20:46 Strange behaviour in MLS Policy Daniel J Walsh
@ 2006-03-13 20:56 ` Stephen Smalley
0 siblings, 0 replies; 2+ messages in thread
From: Stephen Smalley @ 2006-03-13 20:56 UTC (permalink / raw)
To: Daniel J Walsh; +Cc: SE Linux
On Mon, 2006-03-13 at 15:46 -0500, Daniel J Walsh wrote:
> Any idea why devpts in MLS is mounting at SystemHigh?
>
> I see no reason in policy that this would happen.
>
> From reading policy I believe it should be mounting at SystemLow, the
> same way tmpfs does.
>
> The goal is to get it to mount at SystemLow-SystemHigh.
devpts is labeled via fs_use_trans, so the SIDs of its inodes are
computed as transition SIDs, and it therefore inherits its MLS label
from the creating task (in this case, the kernel). See Chad Hanson's
patch from Friday to change initscripts to restorecon /dev/pts after
boot.
--
Stephen Smalley
National Security Agency
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2006-03-13 20:56 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-03-13 20:46 Strange behaviour in MLS Policy Daniel J Walsh
2006-03-13 20:56 ` Stephen Smalley
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.