On Friday 15 April 2005 04:44, David Mohring <heretic@xxxxxxxxxx> wrote: > Is it possible for different instances of SELinux system to share common > labeling for shared partitions? That depends. If you use targeted policy on all SE Linux instances then sharing is no problem. If you use strict policy on all SE Linux instances and have the same roles and identities in the SE Linux policy for all instances then again sharing is no problem. If you want one instance to have strict policy and another to have targeted then you should not be sharing the file system. The targeted policy accessing the shared /home will remove the advantages of strict policy, in which case you may as well use targeted in all cases. -- http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark http://www.coker.com.au/postal/ Postal SMTP/POP benchmark http://www.coker.com.au/~russell/ My home page
