On Friday 02 September 2005 17:09, James Morris wrote: > On Fri, 2 Sep 2005, Gene Czarcinski wrote: > > 6. Any tips on using MCS? > > The usage scenario is intended to be flexible: > > 1) Create names for your categories where is this specified? > 2) Assign users to categories where is this specified? > 3) Let users label their files with the categories as they see fit > > So, a simple example might be: > a) Define c1 to mean "Company_Confidential" > b) Configure all users to have access to c1 > c) Users add this label to files like "secret_product_plan.pdf" > d) httpd, ftpd etc. can't access the file anymore > e) When printed, this category label is automatically added to the header > and footer of each page or a cover sheet (once labeled printing is > completed). Also, in /etc/sysconfig/selinux, do I need to specify SELINUXTYPE=mcs ? I assume I need to install the packages that are in ftp://people.redhat.com/dwalsh/selinux ... especially those under mcs. BTW, it would be nice if the src.rpm packages were available also (e.g., libsetrans) so that I could look at the code if I have any questions. Also, I assume that polyinstantiation of /tmp and /home is not planned for MCS but intended only for MLS ... correct? I assume this since you did not mention the use of "newrole" with respect to MCS. Gene -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-selinux-list
