On Thu, 2008-01-24 at 16:06 -0800, Justin Mattock wrote: > Hello I was wondering if this is possible with the mcs policy: when > using firefox I would issue newrole -r user_r -l s0-s0:c10.c20 then > start firefox with these numbers, then if I wanted to start > streamtuner issue newrole -r user_r -l s0-s0: c190.c200 to listen to > music. Now I've noticed when I'm in the firefox role and categories > streamtuner still starts, is there a way to keep this from happening? I'd suggest just using the TE policy, and defining different domains for firefox and streamtuner. I don't think MCS is really what you want there - it is a user-oriented access control scheme. -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
