-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 01/03/2014 12:35 PM, Michael Scherer wrote:
> Le vendredi 03 janvier 2014 à 11:48 -0500, Daniel J Walsh a écrit :
>> On 01/03/2014 09:16 AM, Michael Scherer wrote:
>
>> Well thinking about this again, I think still to the single label. Lets
>> not break the field up into multiple labels.
>>
>> And not make it SELinux specific. Maybe the field could be
>> SecurityLabel:
>>
>> That would allow smack to also use the field and any other LSM that used
>> a labeling system.
>
> I fail to follow you. The current code use setexecon, and this is quite
> selinux specific. What would be the equivalent for apparmor, for smack and
> others ?
>
>
No idea, I only do SELinux...
But as Kay Pointed out, there is some similar code in udev for this.
>
> Udev uses: SECLABEL{selinux}="foo" SECLABEL{smack}="bar"
>
> I think we should be able to distinguish the LSM-module-specific label type
> somehow in the key or value.
>
> Kay
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlLKsRYACgkQrlYvE4MpobOZaACfZTo4JI3dYFhZ9bXKTVkQrQy0
nB4AoLS6FYmmiasReuREK+oedjWn/jI5
=K5oJ
-----END PGP SIGNATURE-----
_______________________________________________
systemd-devel mailing list
systemd-devel@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/systemd-devel
