Re: [patch 2/3] lsm: add bsdjail module

Serge E. Hallyn
2004-10-13T00:58:56Z

> > +If a private IP was specified for the jail, then
> > + cat /proc/$$/attr/current
>
> How is this going to interact with SELinux? Currently SELinux uses

The first problem is that to use jail with selinux you'll need to use
a stacking infrastructure (which is still being developed) anyway, in
order to get around the multiplexing of task->security, file->f_security,
and sk->sk_security.

But you're right, this is a problem I've had to address with the stacker:

> /proc/*/attr/current to report the current security context of the
> process. libselinux expects the file to contain one string (not even a

...

> selinux: user_u:user_r:user_t

This is exactly what my current stacker does, to the byte :-)

-serge