All of lore.kernel.org
 help / color / mirror / Atom feed
From: Andy Warner <warner@rubix.com>
To: selinux@tycho.nsa.gov
Subject: Label Translation on Fedora 9
Date: Mon, 03 Nov 2008 12:49:28 +0100	[thread overview]
Message-ID: <490EE548.60400@rubix.com> (raw)

[-- Attachment #1: Type: text/plain, Size: 651 bytes --]

I am running Fedora 9 with the MLS policy and see no evidence that the 
label translation is enabled. I am using the default setrans.conf and 
the "disable=1" flag is commented out.

Using the selinux_trans_to_raw (e.g., with a SystemHigh level) produces 
the exact same label string as passed in which will not pass validation 
(using s15:c0.c1023 will pass validation).

Trying id-Z followed by newrole produces:
id -Z
warner_u:secadm_r:secadm_t:s0-s15:c0.c1023

newrole -l SystemLow-SystemHigh
warner_u:secadm_r:secadm_t:SystemLow-SystemHigh is not a valid context

Is there something that must be done to activate label translation?

thanks

Andy

[-- Attachment #2: Type: text/html, Size: 908 bytes --]

             reply	other threads:[~2008-11-03 11:49 UTC|newest]

Thread overview: 15+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2008-11-03 11:49 Andy Warner [this message]
2008-11-03 13:29 ` Label Translation on Fedora 9 Stephen Smalley
2008-11-03 13:47   ` Andy Warner
2008-11-03 13:51     ` Stephen Smalley
2008-11-03 16:29       ` Paul Moore
2008-11-03 20:34         ` Daniel J Walsh
2008-11-09 18:26           ` Joe Nall
2008-11-10 15:56             ` Paul Moore
2008-11-10 16:10               ` Xavier Toth
2008-11-10 16:16                 ` Joe Nall
2008-11-10 16:53                   ` Paul Moore
2008-11-10 16:26                 ` Paul Moore
2008-11-10 16:34                   ` Xavier Toth
2008-11-12  9:23             ` Russell Coker
2008-11-12 13:57               ` Joe Nall

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=490EE548.60400@rubix.com \
    --to=warner@rubix.com \
    --cc=selinux@tycho.nsa.gov \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.