Research Menu

.
Skip Search Box

SELinux Mailing List

Re: identity

From: Joshua Brindle <jbrindle_at_snu.edu>
Date: Mon, 23 Feb 2004 13:32:28 -0600


Stephen Smalley wrote:

> On Sun, 2004-02-22 at 23:35, Russell Coker wrote:
>

>>One of the benefits of the SE Linux identity is that it tracks the originating 
>>user through all operations that they perform.

>
>
> Caveat: This is no longer entirely true, as 'su' is now using
> pam_selinux and transitions to other user identities.
>

Why was this decided, one of the main selling points of selinux was that the identity is always preserved, why back away from this concept?

 From talking to pebenito we aren't going to implement this at all in Gentoo, I'm wondering why others want to implement it.

Joshua Brindle

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
Received on Mon 23 Feb 2004 - 14:32:41 EST
 

Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009

 
bottom

National Security Agency / Central Security Service