Re: Multiple contexts

On Thu, Jan 13, 2005 at 08:56:41AM -0500, James Carter wrote:
> On Wed, 2005-01-12 at 18:32, Luke Kenneth Casson Leighton wrote:
>
> > would you also agree that if someone wants to mess things up
> > with chcon then all bets are off for _any_ kind of analysis?

 sorry i meant to qualify: any kind of analysis using just the  policy files alone.

> >
>
> Not true. Look at Steve's earlier example again.

 at some time when i woke up this morning, i had a flash of inspiration.

 i recognised that there was a problem with what i was proposing.

 it was something to do with creating new files, that not even  an "intermediate" policy based off of combining and creating  "intermediate" filetypes would fix, without, as you say,  examining all files covered by an "intermediate" regexp.

 i could not, for the life of me, tell you what that is, now.

 ... something to do with working out what the overlaps between  two regexps for file contexts, creating new regexps in a venn  diagram like fashion, then applying them with setfiles...

 ... and yet that still doesn't help.

 so, yes.

 time to drop it :)

 l.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.