Re: [RFC] clarifications for -l to newrole.1

[Michael C Thompson <thompsmc@us.ibm.com>]

Stephen Smalley wrote:
> On Fri, 2007-01-12 at 09:07 +1100, Russell Coker wrote:
>> On Friday 12 January 2007 08:02, Stephen Smalley <sds@tycho.nsa.gov> wrote:
>>>> EXAMPLE
>>>>         Changing sensitivity only:
>>>>            # id -Z
>>>>            user:role:type:SystemLow-SystemHigh
>>>>            # newrole -l Unclassified
>>>>            # id -Z
>>>>            user:role:type:Unclassified-SystemHigh
>>> How does SystemLow differ from Unclassified here (in meaning, not just
>>> value)?  If SystemLow is supposed to be a special label for system
>>> objects, then why have users login at that level at all?
>> In the context of the man page I don't think it matters.  The purpose is to
>> clarify an interface that confuses many people.
> 
> I'm concerned about two things:
> - the example being meaningful to the user (what does SystemLow mean
> relative to Unclassified in the user's mind),
> - the actual policy being correct (is it correct for users to login at
> SystemLow and then switch to Unclassified manually, or should they be
> logging in at Unclassified directly and not even allowed to directly
> login at SystemLow).

Currently, in the MLS policy, the default behaviour is to have users 
login at SystemLow. If this is not what you would expect, then we should 
probably change the default levels assumed for users on login.


Mike


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.