2010-12-21 03:13:50

by harrytaurus2002

Subject: [refpolicy] vlock_t only uses the relabeled terminal.

The login or ssh program will relabel a tty or pty device after users
log in, and the vlock domain would only need to use the relabeled tty
or pty device, rather than the whole ttynode or ptynode attribute.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://oss.tresys.com/pipermail/refpolicy/attachments/20101221/b7a58e50/attachment.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-vlock_t-only-uses-relabeled-terminal.patch
Type: application/octet-stream
Size: 1305 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20101221/b7a58e50/attachment.obj

2011-01-05 16:39:23

by cpebenito

Subject: [refpolicy] vlock_t only uses the relabeled terminal.

On 12/20/10 22:13, HarryCiao wrote:
> The login or ssh program will relabel a tty or pty device after users
> log in, and the vlock domain would only need to use the relabeled tty
> or pty device, rather than the whole ttynode or ptynode attribute.

Merged.

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com