Research
.
Skip Search Box

SELinux Mailing List

Re: Desktop apps interoperability

From: Ivan Gyurdiev <ivg2_at_cornell.edu>
Date: Wed, 30 Mar 2005 00:01:06 -0500


How about

New Directory Structure (added to /skel, or whatever)
~/content - ROLE_content_t
~/content/desktop - ???
~/content/downloads - ROLE_untrusted_content_t
~/content/media - ROLE_media_content_t
~/content/documents - ROLE_documents_content_t
~/content/mail - ROLE_mail_content_t
~/content/export_web - ROLE_httpd_user_content_t
~/content/export_samba - ROLE_samba_share_t
~/content/export_p2p - ROLE_p2p_share_t

Desktop apps will be restricted to only access the appropriate one. "Downloading" apps will be restricted to download to untrusted_content_t.

Now...how to move things to/from ~/content/downloads in a nice user-friendly way? What context for desktop? What role will the desktop play?

-- 
Ivan Gyurdiev <ivg2@cornell.edu>
Cornell University


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
Received on Tue 29 Mar 2005 - 23:56:28 EST
 

Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009

 
bottom

National Security Agency / Central Security Service