On Tue, 2006-08-15 at 15:12 -0400, Dan Espen wrote:
> "Thomson, David-P63356" <[EMAIL PROTECTED]> writes:
> > FVWM Developers,
> > 
> > I was told I can only ask questions on here if I am sufficiently vague
> > about what we are doing.  I work for a government contractor and we are
> > currently working on a contract for one of those 3-lettered agencies to
> > do something with PCs and I am in charge (at the moment) of the UI
> > design.  Suffice it to say that our final project will be used by most
> > every gov/mil agency at some point in the coming years.  We did a market
> > survey of window managers for the UI a while back and actually have
> > chosen FVWM.  Enough said...
> > 
> > Here's my hopefully simple task:  learn enough about FVWM to modify it
> > to meet our needs.  Seeing as I am still an amateur in modifying WMs, I
> > hope to pick all your brains, and maybe get a little help while writing
> > these changes.  Having FVWM on many MANY systems in 3-letter abbreviated
> > organizations and "special operations" type organizations along with
> > getting your beloved FVWM to become pretty ubiquitous may be motivating
> > factors.
> > 
> > Let me know if this is the place to ask questions and if any of you are
> > "willing and able".
> > 
> > My first task involves SELinux security labels and per-window
> > decoration.
> > 
> > Dave

Ooo, this will not be easy.  The only way I can think about doing it is
to create a module that is capable of checking what process a windowid
is associated with, then checking the label of that process.  The output
of this could be used to choose a decor.
Although this is all a bit insecure since the link between the decor and
the label is fairly weak.  To do this to a level that would be
considered secure enough to keep labels seperate you'd also need to
monitor the x clipboard to ensure no data is copied down a security
level and much more bits.
If you really need this you may want to look at the metacity that Sun is
using for their trusted solaris extensions (can't remember if they
released it yet though) as it is label aware and can handle most of this
in a secure manner.

Chris

Reply via email to