On Mon, 2008-01-21 at 10:43 -0800, Justin Mattock wrote:
> Hello; If mcs seems to be shaky with the Xserver, then the best
> solution in my mind would be to stay with refpolicy standard.
> until there is secure support for the xserver. Personally using a
> standard policy is probably more than enough protection, for an
> everyday civilian,("hopefully") More over, The whole goal I had with
> SELinux was to learn what it was and how it works, and to learn
> something, "educational".
I think you misunderstood my response. MCS won't be any different than
standard in terms of X server support, as MCS designed such that it
won't cause denials unless you start applying varying category sets to
domains and objects. You'll still have the same issues with TE on any
of the configurations.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
