On 12/13/2012 11:21 AM, Langland, Blake wrote:
Hello, I am attempting to set up a server using SELinux and the MLS policy. I am having trouble restricting network access of this server. There will be a windows machine acting as a client, receiving UDP messages from the server. What I would like to do is restrict what data can be sent to the windows machine based upon the context of the sending process. I have tried to set the sensitivity level of the client node using semanage node command, but traffic is still able to be sent from a process with a higher sensitivity level. Am I missing a step? Thanks for any suggestions you can give me.
You need to configure netlabel, e.g. see: http://paulmoore.livejournal.com/7632.html -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
