From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from facesaver.epoch.ncsc.mil (facesaver [144.51.25.10]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with ESMTP id m18NpfJ2030778 for ; Fri, 8 Feb 2008 18:51:41 -0500 Message-ID: <47ACEB0C.4030201@tycho.nsa.gov> Date: Fri, 08 Feb 2008 18:51:40 -0500 From: Eamon Walsh MIME-Version: 1.0 To: Xavier Toth CC: Glenn Faden , SE Linux Subject: Re: X avcs References: <477BEFF1.2090507@sun.com> <47867FCA.50408@tycho.nsa.gov> <47878130.5010000@gmail.com> <4787D5B7.9090606@sun.com> <478FD1A7.8060401@tycho.nsa.gov> <4793FDC7.9050700@sun.com> <4797D7CB.6010501@tycho.nsa.gov> <47A131D5.2030906@tycho.nsa.gov> In-Reply-To: <47A131D5.2030906@tycho.nsa.gov> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov Eamon Walsh wrote: > Xavier Toth wrote: > >> Has this made it into the git tree yet? >> It's pushed into the XACE-SELINUX branch, so you can play with it now. I did some simple testing of the polyinstantiation and it worked OK for me. You'll need the kernel patch, an updated libselinux from SVN, and an updated refpolicy (or just add "getattr" and "setattr" permissions to your x_property class and tweak the x_contexts file to add poly_property notations). I'll push it into the master branch next week unless I get any feedback directing otherwise. With regard to the rawhide X server, I just ran "strings" on a rawhide Xorg binary and it shows SELinux extension messages. The package has a date of Jan 7 in the version number. So you might try compiling an X server from SRPM, passing the --enable-xselinux=yes flag to the configure script. It might just work, however there have been some changes since Jan 7. -- Eamon Walsh National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.