I am working on an application that needs access to a remote selinux system and this application would like to change the policy for itself so that it can use some resources. Definitely it has to be trusted! I know its weird but in case it has to then what should basically be the sensible thing to do? Is there a possibility that my application can pick the policy that is relevant to itself from the remote selinux so that it can try to modify it? If the policy is not available in text form (monolithic/base or LPM) then what can be the possibilities? Something from the selinuxfs or maybe some tweaking module needed to handle the AVC. If anyone thinks I am stupid (especially Mr. Smalley) then I already know this ;-)
--
Shahbaz Khan
Research Associate, SERG, IMSciences
Group: http://serg.imsciences.edu.pk
Site: http://shazkhan.wordpress.com
Email: shazalive@xxxxxxxxx
cell: +92 300 5944647
