First page Back Continue Last page Overview Graphics
Window Labeling
Make SID's available for reading by clients.
Example: use a window property to store context of window object, and allow windowmgr to read:
allow wm_t app_t:seclabel_xprop_t:property read;
Windowmgr can then display context to user.
Provide X protocol allowing SELinux-aware clients to relabel their objects.