From: harrytaurus2002@hotmail.com (HarryCiao) Date: Tue, 21 Dec 2010 03:11:18 +0000 Subject: [refpolicy] Enable login and use the whole system from /dev/console Message-ID: To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Hi Chris, I remembered months ago we'd been talking about enabling the support of /dev/console so that users could log in from it and then use the system as normal. At that time you'd concluded that you may endorse the support for the console device by a boolean. While, here is the patch, I've made use of the CUSTOM_BUILDOPT in build.conf to define a compile flag to trigger following supports for the /dev/console, I think a build flag would be better than a boolean in that you could enable/disable it according to the real deployment of your system. Provide following supports for the /dev/console: 1. Make it able to be used as a login device; 2. Make users able to login from it; 3. Make many userspace domains able to read from it, so that the corresponding applications could be run on the console; 4. Make relevant domains able to relabel it as well as tty/pty devices, for example, you could use newrole on the console. 5. Mark it as a secure device to change the security level. Any comments just let me know, thanks a lot! Best regards, Harry -------------- next part -------------- An HTML attachment was scrubbed... URL: http://oss.tresys.com/pipermail/refpolicy/attachments/20101221/6d779552/attachment-0001.html -------------- next part -------------- A non-text attachment was scrubbed... Name: 0001-login-and-use-system-from-console.patch Type: application/octet-stream Size: 6895 bytes Desc: not available Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20101221/6d779552/attachment-0001.obj