Re: [systemd-devel] [PATCH 1/3] Add SELinuxContext configuration item

2014-02-11 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/07/2014 08:22 AM, Michael Scherer wrote: > Le jeudi 06 février 2014 à 12:21 -0800, David Timothy Strauss a écrit : >> In order to maximize consistency with newly committed options in >> systemd-nspawn, would it make sense to allow independent co

Re: [systemd-devel] [PATCH 1/3] Add SELinuxContext configuration item

2014-02-07 Thread Michael Scherer
Le jeudi 06 février 2014 à 12:21 -0800, David Timothy Strauss a écrit : > In order to maximize consistency with newly committed options in > systemd-nspawn, would it make sense to allow independent configuration > of the process and file labels instead? The file label are decided by selinux polic

Re: [systemd-devel] [PATCH 1/3] Add SELinuxContext configuration item

2014-02-06 Thread David Timothy Strauss
In order to maximize consistency with newly committed options in systemd-nspawn, would it make sense to allow independent configuration of the process and file labels instead? ___ systemd-devel mailing list systemd-devel@lists.freedesktop.org http://lists

[systemd-devel] [PATCH 1/3] Add SELinuxContext configuration item

2014-02-06 Thread Michael Scherer
This permit to let system administrators decide of the domain of a service. This can be used with templated units to have each service in a différent domain ( for example, a per customer database, using MLS or anything ), or can be used to force a non selinux enabled system (jvm, erlang, etc) to st