Re: MLS extension and non-base modules

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, 2006-10-25 at 10:12 -0400, Sandra Julieta Rueda Rodriguez wrote:
> Hello,
> 
> Since the recommendation is to work with modules. I was wondering if this
> is still true for the mls extension:
> 
> "Security level statements are valid only in monolithic policies and base
> loadable modules. They are not valid in conditional statemens and non-base
> loadable modules".
> (Security level statements refers to sensitivity definition).
> 
> So, in the case of an mls extension I have to work with a monolithic
> policy, is that right?

Not necessarily; you can still use modular policy, but you have to
replace the base module with one that contains your new definitions.

-- 
Stephen Smalley
National Security Agency

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux