>>SELinux Mailing List: by thread

• Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ]

From: Shaun Savage <savages_at_pcez.com>
subject: two different domains from on program
Date: Sun, 16 Dec 2001 22:28:44 -0800

• This message: [ Message body ]
• Next message: Stephen Smalley: "Re: persistent labelling on afs, jfs, xfs?"
• Previous message: Shaun Savage: "Re: iptables.te errors"
• Next in thread: Stephen Smalley: "Re: two different domains from on program"
• Reply: Stephen Smalley: "Re: two different domains from on program"

I have a question.

courier has one program the has two different usage. I would like one program to transistion into two different domains depending on the starting domain.

domain_auto_trans(domain1, exec_file_t, domain2) domain_auto_trans(domain3, exec_file_t, domain4)

where the context of the executable file is exec_file_t

Shaun Savage

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

From: Stephen Smalley <sds_at_tislabs.com>
subject: Re: two different domains from on program
Date: Mon, 17 Dec 2001 07:53:56 -0500 (EST)

• This message: [ Message body ]
• Next message: Vanuxem: "TR: Trans_domain and MLS (small error)"
• Previous message: Stephen Smalley: "Re: iptables.te errors"
• In reply to: Shaun Savage: "two different domains from on program"

On Sun, 16 Dec 2001, Shaun Savage wrote:

> I have a question.
>
> courier has one program the has two different usage. I would like one
> program to transistion into two different domains depending on the
> starting domain.
>
> domain_auto_trans(domain1, exec_file_t, domain2)
> domain_auto_trans(domain3, exec_file_t, domain4)
>
> where the context of the executable file is exec_file_t

So, what's the question? Notice that there are examples of this behavior in the example policy. For example, initrc_t transitions to sendmail_t when running sendmail_exec_t for the daemon process, user_t transitions to user_mail_t when running sendmail_exec_t for sending mail, and sysadm_t transitions to sysadm_mail_t when running sendmail_exec_t for sending mail.

--
Stephen D. Smalley, NAI Labs
ssmalley@nai.com




--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

• Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ]

This archive was generated by hypermail 2.2.0 on Wed 11 Jun 2008 - 08:10:54 EDT