Colin Walters walters at
Thu Jul 21 14:59:57 UTC 2005

On Thu, 2005-07-21 at 10:50 -0400, Christopher J. PeBenito wrote:
> On Thu, 2005-07-21 at 21:42 +1000, Russell Coker wrote:
> > Is this really what we want?  Having a system process allocate shared memory 
> > that can be used by any user processes?  Also it seems likely that other 
> > sound programs will need to access the shared memory in question.
> > 
> > There are three possible assumptions that we could make:
> > 
> > 1)  Anyone who is serious about security doesn't use ALSA so such
> > access doesn't matter that much.
> This isn't the case.  ALSA isn't any different then OSS from a SELinux
> viewpoint.  I don't have ainit on any of my Gentoo machines; after a few
> minutes on Google, it seems that this is a Redhat/Fedora specific
> program.

At the moment possibly, but I'm sure other systems will want to unbreak
their sound eventually too :)

> Probably the right answer if the shared memory doesn't have to be shared
> between all user domains.

It needs to be accessible to any program that wants to play sound.

More information about the fedora-selinux-list mailing list