Horde Application Suite and SELinux...

Colin Walters walters at redhat.com
Wed Feb 23 13:40:32 UTC 2005


On Tue, 2005-02-22 at 23:26 -0500, Kodungallur Varma wrote:
>Hi all,
>
>       I have my fedora core 3 selinux machine setup. I wrote a policy
>to run the following process - spread daemon (Spread tool kit -
>www.spread.org).  its running great with the policy. what I want now
>is some API's/ system calls that I can use to change the security
>context of spread dynamically. in case I am not clear, I am trying to
>modify the spread source code so that spread while running, can change
>its security contexts dynamically. 

In order to do privilege bracketing?  There is work upstream on "dynamic
transitions" (see the mailing list archives) which can occur outside of
an exec, and it looks to me like the necessary code is in Fedora
rawhide.  However, it is not in FC3.






More information about the fedora-selinux-list mailing list