Attached are patches to enable the detection of MLS on a SELinux system.

This consists of an mls object inside of selinuxfs (/selinux/mls), a library call for libselinux (is_selinux_mls_enabled()), and application patches for pam and init. The init patch enables loading of MLS or non-MLS policy depending on kernel configuration. The pam patch will ask for the MLS level if a default context is not found.

-Chad

Chad Hanson				mailto:chanson@tcs-sec.com
Trusted Computer Solutions		Phone: 217-384-0028 x12
121 W Goose Alley			Fax: 217-384-0288

 <<linux-2.6.3_mls.patch>> <<libselinux.patch>>
<<sysvinit-selinux-tcs.patch>> <<pam-selinux-tcs.patch>>

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.



application/octet-stream attachment: linux-2.6.3_mls.patch



application/octet-stream attachment: libselinux.patch



application/octet-stream attachment: sysvinit-selinux-tcs.patch



application/octet-stream attachment: pam-selinux-tcs.patch