[redhat-lspp] Can processes syslog(3) at levels above SystemLow?

Joe Nall joe at nall.com
Fri Apr 6 18:58:21 UTC 2007


In mls enforcing mode will non-SystemLow processes be able to  
generate syslog(3) entries? On my bastardized FC6+LSPP system,

ps -ZC syslogd
LABEL                             PID TTY          TIME CMD
system_u:system_r:syslogd_t:SystemLow-SystemHigh 1725 ? 00:00:00 syslogd

but

ls -Z /var/log/messages
-rw-------  root root system_u:object_r:var_log_t:SystemLow /var/log/ 
messages

implying that SystemHigh processes can log to a SystemLow file.

joe




More information about the redhat-lspp mailing list