Pat Kane wrote:
> Is the current Xace able to deal with MLS selections?
> 
> If so, how does it handle information downgrades that
> need to be reviewed by the end-user?

Xace alone is not - it's just a framework used to provide hooks
that extensions like SELinux & Solaris Xtsol use to provide their
functions.   The Solaris Xtsol module does handle MLS selections,
with a way to have the desktop provide UI for end-user review,
but I don't know off hand how that's implemented.   The code is
of course open for you to explore, and the architects of it are
available on the [email protected] mailing list.

I don't know about SELinux off hand, and am fairly sure the
XC-Security extension (the simplest of the Xace implementations)
does not.

-- 
        -Alan Coopersmith-        [email protected]
         Oracle Solaris Platform Engineering: X Window System

_______________________________________________
[email protected]: X.Org support
Archives: http://lists.freedesktop.org/archives/xorg
Info: http://lists.freedesktop.org/mailman/listinfo/xorg
Your subscription address: [email protected]

Reply via email to