attributes on the other end of a network connection

[Kodungallur Varma <ramgwu@gmail.com>]

Hi all,

        I have a basic client and a server program. my server has the
capability to setcon() to a new domain, the client domain precisely.
my server needs to find the domain and user name of the client user(my
client tries to get a tcp connection first). I heard there is a
function which gives the context and attributes of the other end,
given the attributes got at the servers end and vice-versa. I dont
know where exactly to look for that function capability, but I am
starting in the libselinux library. for security reasons, my client
also needs to be able to execute this function to get the attributes
of the server, just to know that it is connecting to the right server.
if anyone knows about any such function, please pass on to me. thanx a lot..

Ram

On 3/30/05, Stephen Smalley <sds@tycho.nsa.gov> wrote:
> On Tue, 2005-03-29 at 22:41 -0500, Kodungallur Varma wrote:
> > thanx a lot..the program worked. however I need to change the policy
> > file(.te) often and so I need to make load it. I am unable to do that
> > at the moment due to the problem that I updated the following without
> > updating my policy:
> >
> > checkpolicy-1.22
> > libsepol-1.4
> > policycoreutils-1.22
> >
> > how do I uninstall them??
> 
> You can grab the older checkpolicy, libsepol, and policycoreutils
> packages from FC3 and re-install them with rpm -Uvh --oldpackage.
> 
> >  also I tried the alternative to update my
> > policy by doing:
> > "yum install selinux-policy-strict-sources" and "yum install
> > selinux-policy-targeted-sources". the targeted version was updated,
> > but strict had "nothing to do". seems like it is up to date.
> 
> You would need to update to the rawhide (FC4 development) policy; FC3
> policy doesn't include these changes.
> 
> --
> Stephen Smalley <sds@tycho.nsa.gov>
> National Security Agency
> 
>


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.