Re: Reg: domain transition

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 11/1/19 5:48 AM, zer0 0ne wrote:
> I am writing SELinux policies for the first time and I need some
> clarification
> 
>  
> 
>  1. I have executable A executes a system() call, spawns a shell and
>     executes a command ‘B’ and consumes the output of command B. Do I
>     have to use domain transition in the above case or what is the
>     correct way to go about it?>  2. In the above case A and B have different SELinux policies. Since A
>     executes B, in SELinux policy of A do I need to make type B_t as a
>     required type?
>  3. For process A to do domain_transition to B, do I add
>     b_domain_transition macro in A.if file or in A.te
> 
>

I believe you can find answers in this blog:
https://danwalsh.livejournal.com/72287.html

Thanks,
Lukas.

> TiA
> 
> zer0 0ne
> 
> 
> 
> _______________________________________________
> selinux mailing list -- selinux@xxxxxxxxxxxxxxxxxxxxxxx
> To unsubscribe send an email to selinux-leave@xxxxxxxxxxxxxxxxxxxxxxx
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/selinux@xxxxxxxxxxxxxxxxxxxxxxx
> 


-- 
Lukas Vrabec
SELinux Evangelist,
Senior Software Engineer, Security Technologies
Red Hat, Inc.

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
selinux mailing list -- selinux@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to selinux-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/selinux@xxxxxxxxxxxxxxxxxxxxxxx

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux