[F11, SELinux] What is mls?

Marko Vojinovic vvmarko at gmail.com
Tue Jul 7 13:33:20 UTC 2009


On Tue, Jul 7, 2009 at 1:58 PM, Stephen Smalley<sds at tycho.nsa.gov> wrote:
>
> You can ignore, and I think they are silenced by a policy update.
> A libselinux constructor probes for /selinux/mls to initialize internal
> state used later by the library functions, and unfortunately all of the
> net-tools are getting linked against libselinux now just because of
> netstat -Z support.  No, you don't need selinux-policy-mls.
>
> There is a patch pending for libselinux that will make such probing
> happen lazily and thus avoid such denials.

Ok, so after the updates arrive, the alerts will simply go away, IIUC. Thanks!

Best, :-)
Marko




More information about the fedora-list mailing list