Why don't we have a TEMPLATE_SENSITIVITY defined to "s0" and appropriate pattern matching to apply the sensitivity level to all files for the user home directory? Currently if a user has a low level for their sensitivity label which is higher than s0 then the default labeling of their home directory will deny access if the MMCS policy is in use. Presumably the same problem hits MLS users. -- russell@xxxxxxxxxxxx http://etbe.coker.com.au/ My Main Blog http://doc.coker.com.au/ My Documents Blog -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
