Research
Skip Research Menus
Research MenuSecurity Enhanced Linux What's New Frequently Asked Questions Background Documents License Download Participating Mail List Archives Remaining Work Contributors Related Work Press Releases Information Assurance Research NIARL In-house Research Areas Mathematical Sciences Program Sabbaticals Computer & Information Sciences Research Technology Transfer Advanced Computing Advanced Mathematics Communications & Networking Information Processing Microelectronics Other Technologies Technology Fact Sheets Publications Related Links |
SELinux Mailing ListRe: Add a new class
From: Stephen Smalley <sds_at_epoch.ncsc.mil>
Date: Mon, 03 Jan 2005 09:01:26 -0500
FC3 is strongly recommended over FC2 for SELinux users.
> I've added a new class to security_classes and the When adding new classes, you should typically work off of our sourceforge CVS tree, as that will have the latest definitions. Or at the very least, you should work off of the latest kernel, i.e. 2.6.10 + 2.6.10-mm1 from kernel.org. Note that until you submit a patch reserving your classes to us and until we accept such a patch into our tree, the class value may be re-used at any time for some other purpose, forcing you to re-base, much like adding a new syscall to the kernel. We have already reserved a new class and permissions for Trent Jaeger's IPSEC work, as you can see in our sourceforge CVS tree.
> What confused me here is that: MUST we also copy the It isn't required unless some application needs to reference the new class, but we do update them when we merge new classes into our tree to keep them in sync. In the long term, it is expected that there will be a separate mechanism for userspace object managers to dynamically register security classes and permissions for their own use, e.g. see the SELinux Policy Server project by Tresys. -- Stephen Smalley <sds@epoch.ncsc.mil> National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.Received on Mon 3 Jan 2005 - 09:07:26 EST |
|
Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009 |