From: dwalsh@redhat.com (Daniel J Walsh)
Date: Thu, 05 Mar 2009 14:17:41 -0500
Subject: [refpolicy] kernel_storage.patch
In-Reply-To: <1236277098.26944.118.camel@gorn.columbia.tresys.com>
References: <49AEF3A6.7080007@redhat.com>	
	<1236269561.26944.115.camel@gorn.columbia.tresys.com>	
	<49B00BBF.7020302@redhat.com>
	<1236277098.26944.118.camel@gorn.columbia.tresys.com>
Message-ID: <49B02555.5000900@redhat.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Christopher J. PeBenito wrote:
> On Thu, 2009-03-05 at 12:28 -0500, Daniel J Walsh wrote:
>> Christopher J. PeBenito wrote:
>>> On Wed, 2009-03-04 at 16:33 -0500, Daniel J Walsh wrote:
>>>> http://people.fedoraproject.org/~dwalsh/SELinux/F11/kernel_storage.patch
>>>>
>>>> Additonal file context
>>>>
>>>> Allow management of fixed_disk_device_t chr_file
>>> Are you sure about the MLS change of the FUSE device to system low, from
>>> system high?
>>>
>>> Otherwise merged.
>>>
>> fuse file systems are mounted on users home directories by default in
>> F10/F11 so a MLS login as a user will only work if this is SystemLow.
> 
> Can you describe more fully what the scenario is?  I'm having trouble
> seeing where the MLS issue is.  It seems like mount should be able to
> handle this fine.
> 
I am not logged in as MLS right now so, I can't regenerate.  It could be
that some app during the login was not running ranged and could not
execute a ranged mount.

Hold off on the label, and I will see try MLS on my laptop again and see
if I can get more info.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkmwJVUACgkQrlYvE4MpobPHBgCfShVtHRF3AhaUDLR/vPzH82TC
KCkAmwf16O5oxKiZvPBU+uRYhElOOdH8
=NYUV
-----END PGP SIGNATURE-----