I am still trying to fully understand sensitivity vs category with mls constrains. I noticed that files are not labeled with a category, just a sensitivity in all the example I looked at (s0). Are categories more for "data in motion"? ie 2 processes want to share data, they both have allow rules to access their own files. App1 has a c0 and app2 is c0,c1 then based on mls constraints data con be controlled between them? Could you label files with categories too? or does that not make sense? -- Respectfully, William C Roberts -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
