From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Mon, 06 Oct 2008 14:12:43 -0400
Subject: [refpolicy] mls.patch
In-Reply-To: <45912BE5-DF08-44D6-8591-1D2E3A459FFF@nall.com>
References: <48DBDC51.8000206@redhat.com> <1223305650.2165.16.camel@gorn>
	<45912BE5-DF08-44D6-8591-1D2E3A459FFF@nall.com>
Message-ID: <1223316763.2165.33.camel@gorn>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Mon, 2008-10-06 at 10:19 -0500, Joe Nall wrote:
> On Oct 6, 2008, at 10:07 AM, Christopher J. PeBenito wrote:
> > On Thu, 2008-09-25 at 14:45 -0400, Daniel J Walsh wrote:
> >> http://people.fedoraproject.org/~dwalsh/SELinux/F10/mls.patch
> >>
> >> Joe this is the patch I have off of current reference policy.   Is  
> >> this
> >> correct or should I use reference policy mls?
> >
> > This has a problem: It makes the xserver module required in the base
> > module.
> 
> Due to the use of rootwindow_type?
> 
> Should a new attribute be added to mls.te and used here?

I would make a mlsrootwindow attribute and apply it to types in the same
places that rootwindow_type are used, rather than trying to just have
one attribute.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150