On 03/07/2012 08:28 AM, Eric Paris wrote:
When new objects are created we have great and flexible rules to determine the type of the new object.
Shouldn't we introduce a default_type for class_datum as well? So far the process and various socket classes will inherit the creating process's domain, that is, DEFAULT_SOURCE as in your example, whilst for any other classes the type of the newly created object will follow the containing directory, that is, DEFAULT_TARGET.
Above logic has been hard-coded in security_compute_sid, which is a matter of policy and should be moved from security server to refpolicy.
-- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
