Re: mcstransd

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



--- Stephen Smalley <sds@xxxxxxxxxxxxx> wrote:

> 
> On Mon, 2008-04-07 at 15:13 +1100, Russell Coker wrote:
> > Is there a plan for a mlstransd daemon?  If there is no plan for a
> different 
> > daemon for translating MLS contexts then this should be renamed to
> senstransd 
> > or something similar.
> 
> We're looking into getting the MITRE label encoding library released so
> that it can be used as the core of a mlstransd.

Oh my. I do hope that you will have spoken with people
who have worked professionally with that code prior to
committing to that plan. During the CMW days the MITRE
label encoding facility raised much concern with its
level of complexity. There were also concerns raised
about the code on 2 of the 3 B1 evaluations that used
it. You may decide to use it anyway, but do be careful.



Casey Schaufler
casey@xxxxxxxxxxxxxxxx

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.

[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux