Research
.
Skip Search Box

SELinux Mailing List

Re: the new default_contexts file

From: Russell Coker <russell_at_coker.com.au>
Date: Wed, 30 Oct 2002 23:57:20 +0100


On Wed, 30 Oct 2002 23:45, Stephen Smalley wrote:
> On Wed, 30 Oct 2002, Russell Coker wrote:
> > The idea of having key-value pairs where the key is the partial context
> > of the daemon is good.
> >
> > However only being able to specify an order is not good.
> >
> > I would like to be able to have two users, user "a" gets user_r:user_t by
> > default while user "b" gets second_r:second_t by default even though both
> > users are authorised for both roles.
>
> This can be customized on a per-user basis by the user via a
> $HOME/.default_contexts file. Same syntax as the main configuration file,
> and it takes precedence.

OK. Should we define a new type for the default_contexts file then and allow the various login programs read access?

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
Received on Wed 30 Oct 2002 - 18:09:47 EST
 

Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009

 
bottom

National Security Agency / Central Security Service