Are there any plans to extend SELinux to provide thread level controls? I recognize that this is considerably harder than process level controls given that threads share a number of resources, but it would be quite useful, at least from an MLS perspective. Today, most systems are going to contain web servers, corba services, or some other form of client-server architecture where a server runs as a single process and starts separate threads for client connections. It's often not going to be viable to have separate servers for each different compartment/classification, especially when considering the rainbow of possible compartment combinations (x, y, z, xy, xz, yz, xyz) Any thought? -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
