Messages in this thread | | | Date | Wed, 12 Dec 2007 11:20:40 -0800 (PST) | From | Casey Schaufler <> | Subject | Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] |
| |
--- David Howells <dhowells@redhat.com> wrote:
> Casey Schaufler <casey@schaufler-ca.com> wrote: > > > You may need to have an application, say cachefileselinuxcontext, that will > > read the current policy and spit out an appropriate value of "<whatever>", > > but that can be separate and LSM specific without mucking up your basic > > infrastructure applications. > > What would I do with such a thing? How would it get run? Spat out to where?
Put it in /etc/init.d/cachefiles and run it at boot time. Put the result into /etc/cachefiles.conf. Have cachefilesd read it and pass it downward.
Casey Schaufler casey@schaufler-ca.com
| |