Re: Context translation and MLS categories

On Tue, 2006-02-28 at 12:35 -0500, Ivan Gyurdiev wrote:
> >> 1) We translate the entire range when displaying
> >> 2) When modifying the range, we unroll the user's range as (s,c) pairs,
> >> then translate each of them, and present them as required clearances to
> >> be added or removed
> >>
> >
> > In general, you can't unroll it in this manner. It may make sense to do
> > so for a particular policy (e.g. MCS in particular), but not in the
> > general case for MLS.
> >
> Can you give an example?

http://docs.sun.com/app/docs/doc/805-8123/6j7ktfm62?a=view http://docs.sun.com/app/docs/doc/805-8123/6j7ktfm7h?a=view

-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.