Fast User Switching and security / SELinux

[Karl MacMillan <kmacmill@redhat.com>]

Reading through http://fedoraproject.org/wiki/Desktop/FastUserSwitching, 
I had two questions.

1) Any work ongoing to look at the security of this solution. For 
example, the proposed fix for device ownership allows multiple users to 
use devices simultaneously. This could have serious security 
implications (e.g., monitoring VIOP calls made by another user).

2) Some work will likely be needed for this to work well with SELinux, 
particularly as we are looking at locking down user apps as an option in 
the future (evolution, firefox, etc.). This may also include XACE 
(http://blogs.sun.com/alanc/entry/xace_merged_into_xorg_for - just 
ignore the trusted extensions notes). Any current plans on tackling this?

Thanks - Karl

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.