Russell Coker wrote:
The command "netstat -Z -t" will show two entries for a localhost connection
and thus show the context of each end of the socket.
The command "netstat -Z -x" seems to only show a single entry for the
connection which will be from the server end.
http://wiki.postgresql.org/wiki/SEPostgreSQL
The above wiki page mentions "netstat -Z" and my personal interpretation of
this was that I could use "netstat -Z" to find the context of a client end of
a socket. But it seems that I can only get the server end.
Is this what is desired?
Please note that the above wiki entry is on "postgresql.org".
It assumes PostgreSQL folds (not SELinux specialist) as audiences.
The purpose of description about "netstat -Z" is to make clear
the fact security context can be assigned to various kind of
objects (like socket), except for filesystem also.
Thanks,
--
OSS Platform Development Division, NEC
KaiGai Kohei <kaigai@xxxxxxxxxxxxx>
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
