Re: Problem with semodule mls policy

[Joshua Brindle <jbrindle@tresys.com>]

Stephen Smalley wrote:
> On Wed, 2006-03-15 at 11:37 -0500, Joshua Brindle wrote:
>> Stephen Smalley wrote:
>>> Possibly local customizations are in view here, e.g. the contents of
>>> interfaces.local, that are then fed into the final policy.20 emitted by
>>> libsemanage?  seusers is the more likely concern, as you note, and it is
>>> harder to transparently label it separately since it doesn't live in its
>>> own dedicated subdirectory (so range_transition wouldn't help with it;
>>> you'd need libsemanage code modification).
>>>  
>> The entire module store (/etc/selinux/<type>/modules/*) should be 
>> entirely inaccessible except by an semanage_t domain (and policy server 
>> later) via type enforcement, so those shouldn't be a concern. The 
>> policy.20 shouldn't really contain any sensitive information so I think 
>> the only necessary modification is to label seusers differently, correct?
> 
> I wasn't sure whether the fact that e.g. netif eth0 is assigned
> SystemHigh and netif eth1 is assigned SystemLow in interfaces.local
> (which is then compiled into policy.20) might be considered sensitive.
> If so, that would make the final policy.20 sensitive as well.
> 

I can buy this, as well as nodecons having different levels. The strange 
thing is that you don't know what the levels are exactly, you just know 
their relationships to each other. ie: eth0 is s1 and eth1 is s5 so eth1 
is higher sensitivity even though I don't know what that sensitivity 
means. How big of an issue is this? Chad?

writing down files of different levels from within libsemanage means any 
libsemanage client must be mls trusted, which may or may not be an 
issue, I'm not sure.

So, if this is an issue then both seusers and policy.20 need to be 
labeled differently.. should this be done through libsemanage config or 
some appconfig in the policy?

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.