Any way to label /proc/self/mem with a different type then the process type.

[Daniel J Walsh]

I have been requested by some container people to make this only
readable not writable to prevent certain types of attacks on the

kernel.  No idea if this is a good idea or not.

_______________________________________________
Selinux mailing list
Selinux@tycho.nsa.gov
To unsubscribe, send email to selinux-le...@tycho.nsa.gov.
To get help, send an email containing "help" to selinux-requ...@tycho.nsa.gov.