Messages in this thread | | | Subject | Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] | From | Stephen Smalley <> | Date | Thu, 13 Dec 2007 09:51:01 -0500 |
| |
On Wed, 2007-12-12 at 22:55 +0000, David Howells wrote: > Stephen Smalley <sds@tycho.nsa.gov> wrote: > > > More likely, run it at build time in your .spec file to generate > > cachefiles.conf, > > I don't think sticking it in cachefiles.conf is a good idea necessarily. > That has to be an administrator modifiable file. Is there a program I could > make cachefiles run directly and capture the output of that could give me the > info I want?
Yes, we could easily make a simple program that just invokes a libselinux function that in turn grabs the proper context from some context configuration file under /etc/selinux/$SELINUXTYPE/contexts/ and outputs it. Dan can help with that.
> > then run it again maybe upon a policy update or if the user selects a > > different policy. > > How do I do that?
-- Stephen Smalley National Security Agency
| |