On Mon, 2008-09-08 at 14:41 -0500, Joe Nall wrote: > How is the file context/socket context of the X11 unix domain socket > computed now that it is an abstract socket? The socket context is computed the same way regardless - that is generic, i.e. the sid of the creating task or the one specified using setsockcreatecon(). There is no file context when you are dealing a socket in the abstract namespace, nor any file permission checks on it. -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
