On Tue, 2005-02-22 at 23:26 -0500, Kodungallur Varma wrote: >Hi all, > > I have my fedora core 3 selinux machine setup. I wrote a policy >to run the following process - spread daemon (Spread tool kit - >www.spread.org). its running great with the policy. what I want now >is some API's/ system calls that I can use to change the security >context of spread dynamically. in case I am not clear, I am trying to >modify the spread source code so that spread while running, can change >its security contexts dynamically. In order to do privilege bracketing? There is work upstream on "dynamic transitions" (see the mailing list archives) which can occur outside of an exec, and it looks to me like the necessary code is in Fedora rawhide. However, it is not in FC3.
