KaiGai Kohei wrote:
Russell Coker wrote:
The command "netstat -Z -t" will show two entries for a localhost
connection and thus show the context of each end of the socket.
The command "netstat -Z -x" seems to only show a single entry for the
connection which will be from the server end.
http://wiki.postgresql.org/wiki/SEPostgreSQL
The above wiki page mentions "netstat -Z" and my personal
interpretation of this was that I could use "netstat -Z" to find the
context of a client end of a socket. But it seems that I can only
get the server end.
Is this what is desired?
Please note that the above wiki entry is on "postgresql.org".
It assumes PostgreSQL folds (not SELinux specialist) as audiences.
The purpose of description about "netstat -Z" is to make clear
the fact security context can be assigned to various kind of
objects (like socket), except for filesystem also.
Thanks,
Well; it's nice issuing:
ps auxZ to achieve some stats,
as opposed to ps au*;
In any case -Z would be nice to see,
regards;
Justin P. Mattock
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
