Re: netstat -Z

["Justin P. Mattock" <justinmattock@gmail.com>]

KaiGai Kohei wrote:
> Russell Coker wrote:
>> The command "netstat -Z -t" will show two entries for a localhost 
>> connection and thus show the context of each end of the socket.
>>
>> The command "netstat -Z -x" seems to only show a single entry for the 
>> connection which will be from the server end.
>>
>> http://wiki.postgresql.org/wiki/SEPostgreSQL
>>
>> The above wiki page mentions "netstat -Z" and my personal 
>> interpretation of this was that I could use "netstat -Z" to find the 
>> context of a client end of a socket.  But it seems that I can only 
>> get the server end.
>>
>> Is this what is desired?
>
> Please note that the above wiki entry is on "postgresql.org".
> It assumes PostgreSQL folds (not SELinux specialist) as audiences.
> The purpose of description about "netstat -Z" is to make clear
> the fact security context can be assigned to various kind of
> objects (like socket), except for filesystem also.
>
> Thanks,
Well; it's nice issuing:
ps auxZ to achieve some stats,
as opposed to ps au*;
In any case -Z would be nice to see,

regards;

Justin P. Mattock
 

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.