[redhat-lspp] Re: New MLS constraint?

[Christopher J. PeBenito]

On Tue, 2006-10-31 at 19:47 -0500, Matt Anderson wrote:
> Christopher J. PeBenito wrote:
> > We could add another 'or' on the above constraint:
> > 
> > or ( (t2 == mlsfilewrite_in_range) and (l1 dom l2) and (h1 domby h2) )
> > 
> > I believe that would be the constraint you were looking for.  I don't
> > like the name of that attribute, but I couldn't come up with a better
> > one off the top of my head. :)
> > 
> 
> Attached is a patch which I've tested against selinux-policy-2.4.2-1
> that implements this additional constraint.  The name is still a bit
> forced, but it works.

Merged.  Moved the printer_device_t line to devices.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150