All,
I am experiencing some issues using range_transition on objects when type_transition is also involved on the object. Specifically, a range_transition rule on a target object with a "final" type (e.g. a type which went through a type_transition) does not seem to perform the range transition.
For example, using a private var log type (uses a type_transition from var_log_t) does not perform the range transition:
range_transition mydomain_t mypriv_var_log_t:file mySystemHigh;
I am confident my source domain is correct, I believe the issue is with the target object. Policy version is 24.
Regards,
--
Paul Arnold, CISSP Cole Engineering Services, Inc. |
Attachment:
smime.p7s
Description: S/MIME cryptographic signature