All of lore.kernel.org
 help / color / mirror / Atom feed
From: Ivan Gyurdiev <gyurdiev@redhat.com>
To: Janak Desai <janak@us.ibm.com>
Cc: Stephen Smalley <sds@tycho.nsa.gov>,
	Karl MacMillan <kmacmillan@tresys.com>,
	selinux@tycho.nsa.gov, "'Daniel J Walsh'" <dwalsh@redhat.com>
Subject: Re: file contexts and modularity
Date: Thu, 30 Jun 2005 09:53:25 -0400	[thread overview]
Message-ID: <1120139605.32561.28.camel@celtics.boston.redhat.com> (raw)
In-Reply-To: <1120077839.20484.104.camel@celtics.boston.redhat.com>

On Wed, 2005-06-29 at 16:44 -0400, Ivan Gyurdiev wrote:
> > Subdirectory context is obtained from the policy
> > using security_compute_member() call. 
> 
> int security_compute_member(security_context_t scon,
>                             security_context_t tcon,
>                             security_class_t tclass,
>                             security_context_t *newcon)
> 
> So, it seems to me that
> this is insufficient basis to determine proper newcon - 
> file_type_auto_trans doesn't work for the same reason.
> 
> (scon, tcon, tclass) -> newcon 
> 
> is a 1:many map, and not 1:1.
> 
> So...how will pre-creation work if the file_contexts.homedirs
> file is erased (the only many:1 map available, 
> which becomes 1:1 given evaluation order).

To clarify, what I mean is... the file_context allows us to uniquely 
identify files, and label them appropriately. The (scon, tcon, tclass)
pair is not sufficient to uniquely identify the resultant type. 
There are many occasions where we need multiple types with the same
triple, which is why we have this hack script that Karl doesn't like
at all, which does pre-creation of subfolders. However, that 
script requires the file_contexts file to work, so I don't 
see how it can be removed, with or without polyinstantiation.

I can see the problem being fixed if you label files under /home
_and_ /tmp with a ROLE independent-type. This will also remove the
need to relabel after a change in primary role, which is currently
a major issue. However, I wasn't sure if that was being suggested? 
Is this what we're discussing here - removing role-dependent labeling,
since other roles' content will be hidden by polyinstantiation?




--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

  reply	other threads:[~2005-06-30 13:53 UTC|newest]

Thread overview: 59+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-06-23  3:00 file contexts and modularity Ivan Gyurdiev
2005-06-23 17:37 ` Karl MacMillan
2005-06-23 18:05   ` Ivan Gyurdiev
2005-06-23 18:21     ` Karl MacMillan
2005-06-23 18:25       ` Ivan Gyurdiev
2005-06-23 18:40         ` Karl MacMillan
2005-06-23 19:00           ` Ivan Gyurdiev
2005-06-23 19:39             ` Karl MacMillan
2005-06-23 20:28               ` Ivan Gyurdiev
2005-06-23 20:36                 ` Ivan Gyurdiev
2005-06-24 12:08                 ` Stephen Smalley
2005-06-24 15:43                   ` Ivan Gyurdiev
2005-06-24 18:32                     ` Stephen Smalley
2005-06-24 18:37                       ` Ivan Gyurdiev
2005-06-24 12:21                 ` Stephen Smalley
2005-06-24 14:30                   ` Karl MacMillan
2005-06-24 16:05                     ` Karl MacMillan
2005-06-24 18:05                       ` Frank Mayer
2005-06-24 18:40                         ` Stephen Smalley
2005-06-28 15:41                           ` Karl MacMillan
2005-06-28 16:21                             ` Stephen Smalley
2005-06-24 15:51                   ` Casey Schaufler
2005-06-24 16:36                     ` Karl MacMillan
2005-06-24 16:47                       ` Casey Schaufler
2005-06-24 16:56                         ` Karl MacMillan
2005-06-24 17:10                           ` Casey Schaufler
2005-06-24 15:39                 ` Karl MacMillan
2005-06-24 16:03                   ` Ivan Gyurdiev
2005-06-24 16:28                     ` Karl MacMillan
2005-06-24 17:56                       ` Ivan Gyurdiev
2005-06-27 15:07                         ` Karl MacMillan
2005-06-27 15:36                           ` Ivan Gyurdiev
2005-06-27 17:25                             ` Karl MacMillan
2005-06-27 17:56                               ` Ivan Gyurdiev
2005-06-28 13:47                                 ` Karl MacMillan
2005-06-28 19:31                                   ` Ivan Gyurdiev
2005-06-29 17:28                                     ` Ivan Gyurdiev
2005-06-29 18:17                                       ` Karl MacMillan
2005-06-29 18:46                                         ` Ivan Gyurdiev
2005-06-29 18:53                                           ` Stephen Smalley
2005-06-29 19:04                                             ` Karl MacMillan
2005-06-29 19:24                                               ` Ivan Gyurdiev
2005-06-29 19:50                                                 ` Stephen Smalley
2005-06-29 20:03                                                   ` Ivan Gyurdiev
2005-06-29 20:09                                                     ` Stephen Smalley
2005-06-29 20:22                                                       ` Ivan Gyurdiev
2005-06-30 13:54                                                         ` Stephen Smalley
2005-06-29 20:22                                                     ` Janak Desai
2005-06-29 20:43                                                       ` Ivan Gyurdiev
2005-06-30 13:53                                                         ` Ivan Gyurdiev [this message]
2005-06-30 13:58                                                           ` Stephen Smalley
2005-06-30 14:48                                                             ` Karl MacMillan
2005-06-30 14:52                                                               ` Stephen Smalley
2005-06-30 13:56                                                         ` Stephen Smalley
2005-06-29 20:13                                                   ` Janak Desai
2005-06-30  0:40                                                   ` Luke Kenneth Casson Leighton
2005-06-29 19:04                                           ` Karl MacMillan
2005-06-29 19:20                                             ` Ivan Gyurdiev
2005-06-24  5:03           ` Ivan Gyurdiev

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1120139605.32561.28.camel@celtics.boston.redhat.com \
    --to=gyurdiev@redhat.com \
    --cc=dwalsh@redhat.com \
    --cc=janak@us.ibm.com \
    --cc=kmacmillan@tresys.com \
    --cc=sds@tycho.nsa.gov \
    --cc=selinux@tycho.nsa.gov \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.