2009-05-04 11:21:16

by xuning1979

[permalink] [raw]
Subject: [refpolicy] about MLS!

hello,everyone:
I have used refpolicy 2.20081210 to test selinux on my Linux ver 2.6.18,but some matter when i use " TYPE = mls":
1. is selinux mls support x windows?
2. i found the roles include "secadm auditadm", but how to login from secadm_r or auditadm_r?
thanks a lot


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://oss.tresys.com/pipermail/refpolicy/attachments/20090504/ec8d6af2/attachment.html


2009-05-04 12:00:30

by Chris PeBenito

[permalink] [raw]
Subject: [refpolicy] about MLS!

On Mon, 2009-05-04 at 19:21 +0800, ?? wrote:
> hello,everyone:
> I have used refpolicy 2.20081210 to test selinux on my Linux ver 2.6.18,but some matter when i use " TYPE = mls":
> 1. is selinux mls support x windows?

The X policy with MLS in refpolicy has had little testing, though people
are working on it.

> 2. i found the roles include "secadm auditadm", but how to login from secadm_r or auditadm_r?
> thanks a lot

You need to add the role to your seuser, or create a new seuser which is
allowed the role.

--
Chris PeBenito
<[email protected]>
Developer,
Hardened Gentoo Linux

Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
Key fingerprint = B0E6 877A 883F A57A 8E6A CB00 BC8E E42D E6AF 9243
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20090504/f2345fe8/attachment.bin