Hello all,
I knew that selinux use the mechanism of netlink to broadcast the event of policy changing. such as
selnl_notify_policyload(seqno); but i could't find the receiver (some object manager) to handle it?
and according to the Technical Reports of selinux, i also knew the avc in selinux resolved the problem about
revocation of migrated permissions, but how do implement it?