Re: Is there a way to set default MCS labels for file creation?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, 22 Jun 2007, Bruno Wolff III wrote:

> On Thu, Jun 21, 2007 at 16:18:43 -0500,
>   Bruno Wolff III <bruno@xxxxxxxx> wrote:
> > Is there a way to set a default set of labels for newly created files
> > based on file paths or role?
> 
> I found information stating the default type comes from the type of the
> directory in which the file is created,

Not for MCS labels, though.  MCS labels can't currently be applied to 
directories, although the potentially could, and then files created under 
the directories could receive MCS labels based upon the parent directory 
and the creating process.  The idea was to keep it as absolutely simple as 
possible and for users to explicitly label each object with MCS labels (so 
there are no inheritance semantics, for example).

This whole area is under review, and there's been some discussion of using 
TE for user labeling (cc'd Karl and Stephen).


- James
-- 
James Morris
<jmorris@xxxxxxxxx>

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux