On Tue, 2010-04-13 at 08:34 -0400, Stephen Smalley wrote: > On Tue, 2010-04-13 at 08:29 -0400, Christopher J. PeBenito wrote: > > On Mon, 2010-04-12 at 19:19 -0400, Eric Paris wrote: > > > kernel can dynamically remap perms. Drop the open lookup table and put open > > > in the common file perms. > > > > So I need to move open into the common perms in the policy? Thats going > > to be a nasty compatibility problem for older systems. > > No, you don't have to change anything in the policy - that's the point > of the dynamic class/perm discovery support in the kernel. The kernel > will map its notion of open permission to the policy values at policy > load time and will then map access vectors accordingly. > So do common permissions even need to be defined in a policy? -- James Carter <jwcart2@xxxxxxxxxxxxx> National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
