diff for duplicates of <4ACFA7F1.6060209@redhat.com> diff --git a/a/1.txt b/N1/1.txt index 6eb3bb8..fc26ba0 100644 --- a/a/1.txt +++ b/N1/1.txt @@ -49,7 +49,7 @@ On 10/09/2009 04:57 PM, Serge E. Hallyn wrote: > 7. Just print nothing instead of 'null' for SECSID_NULL > 8. sids are __u32, as are lenghts passed to sid_to_context. > -> Signed-off-by: Serge E. Hallyn <serue-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org> +> Signed-off-by: Serge E. Hallyn <serue@us.ibm.com> > --- > checkpoint/restart.c | 1 + > security/selinux/hooks.c | 366 ++++++++++++++++++++++++++ @@ -569,3 +569,8 @@ On 10/09/2009 04:57 PM, Serge E. Hallyn wrote: > #define SHM__GETATTR 0x00000004UL I think you need to be careful with this. We do not want the process to start with the same MCS Label as when it stopped in case some other virtual machine has grabbed the MCS Label. When the image is taken down it should give up probably give up its labels and allow the system to relabel to a known state. When it starts the image again, new labels should be selected and set on disk and the process resumed with the new label. + +-- +This message was distributed to subscribers of the selinux mailing list. +If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with +the words "unsubscribe selinux" without quotes as the message. diff --git a/a/content_digest b/N1/content_digest index ba75333..a1aa464 100644 --- a/a/content_digest +++ b/N1/content_digest @@ -1,13 +1,13 @@ "ref\020091009205552.GA5778@us.ibm.com\0" "ref\020091009205731.GC5823@us.ibm.com\0" - "ref\020091009205731.GC5823-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org\0" - "From\0Daniel J Walsh <dwalsh-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>\0" + "From\0Daniel J Walsh <dwalsh@redhat.com>\0" "Subject\0Re: [PATCH 4/4] cr: add selinux support (v6)\0" "Date\0Fri, 09 Oct 2009 17:15:29 -0400\0" - "To\0Serge E. Hallyn <serue-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org>\0" - "Cc\0Linux Containers <containers-qjLDD68F18O7TbgM5vRIOg@public.gmane.org>" - linux-security-module-u79uwXL29TY76Z2rM5mHXA@public.gmane.org - " SELinux <selinux-+05T5uksL2qpZYMLLGbcSA@public.gmane.org>\0" + "To\0Serge E. Hallyn <serue@us.ibm.com>\0" + "Cc\0Oren Laadan <orenl@cs.columbia.edu>" + Linux Containers <containers@lists.osdl.org> + linux-security-module@vger.kernel.org + " SELinux <selinux@tycho.nsa.gov>\0" "\00:1\0" "b\0" "On 10/09/2009 04:57 PM, Serge E. Hallyn wrote:\n" @@ -61,7 +61,7 @@ "> \t\t7. Just print nothing instead of 'null' for SECSID_NULL\n" "> \t\t8. sids are __u32, as are lenghts passed to sid_to_context.\n" "> \n" - "> Signed-off-by: Serge E. Hallyn <serue-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org>\n" + "> Signed-off-by: Serge E. Hallyn <serue@us.ibm.com>\n" "> ---\n" "> checkpoint/restart.c | 1 +\n" "> security/selinux/hooks.c | 366 ++++++++++++++++++++++++++\n" @@ -580,6 +580,11 @@ "> #define SHM__DESTROY 0x00000002UL\n" "> #define SHM__GETATTR 0x00000004UL\n" "\n" - I think you need to be careful with this. We do not want the process to start with the same MCS Label as when it stopped in case some other virtual machine has grabbed the MCS Label. When the image is taken down it should give up probably give up its labels and allow the system to relabel to a known state. When it starts the image again, new labels should be selected and set on disk and the process resumed with the new label. + "I think you need to be careful with this. We do not want the process to start with the same MCS Label as when it stopped in case some other virtual machine has grabbed the MCS Label. When the image is taken down it should give up probably give up its labels and allow the system to relabel to a known state. When it starts the image again, new labels should be selected and set on disk and the process resumed with the new label.\n" + "\n" + "--\n" + "This message was distributed to subscribers of the selinux mailing list.\n" + "If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with\n" + "the words \"unsubscribe selinux\" without quotes as the message." -0d7e3706f6d5c061fa334d32eee5dba5ce8ff070016c2f0fb7c5002b39cd0672 +a5dbaddc6c9ca0643efb3c075e7962415d0f0c9c84ad47377d39035a89011e49
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.