[redhat-lspp] Re: [PATCH 3/3] Re: MLS enforcing PTYs, sshd, and newrole

James Antill jantill at redhat.com
Mon Oct 30 20:22:26 UTC 2006


On Mon, 2006-10-30 at 15:16 -0500, James Antill wrote:
> On Mon, 2006-10-30 at 15:03 -0500, James Antill wrote:
> > On Fri, 2006-10-27 at 14:38 -0400, Stephen Smalley wrote:
> > 
> > > Look at Darrel's patch for mcstransd to apply a permission check between
> > > the level of the caller and the level being translated for context
> > > translations. 
> > 
> >  Thanks to much discussion with Dan and Stephen, I'm pretty sure I have
> > this correct now.


 Here is the PAM part of the patches (libselinux and reference policy
came previously). This requires the libselinux changes.

-- 
James Antill <jantill at redhat.com>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pam-0.99.6.2-selinux-config_role.patch
Type: text/x-patch
Size: 8715 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/redhat-lspp/attachments/20061030/b87a7dcd/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/redhat-lspp/attachments/20061030/b87a7dcd/attachment.sig>


More information about the redhat-lspp mailing list