selinux/libsemanage
Russell Coker d784fd71b5 libsemanage: patch for MCS/MLS in user files
The attached patch makes the
/etc/selinux/default/contexts/files/file_contexts.homedirs generation process
include the MCS/MLS level.

This means that if you have a user with a MCS/MLS level that isn't SystemLow
then their home directory will be labeled such that they can have read/write
access to it by default.

Unless anyone has any better ideas for how to solve this problem I will upload
this to Debian shortly.

What do the MLS users do in this situation?  Just relabel home directories
manually?

Finally it seems that when you run "semanage user -m" the
file_contexts.homedirs doesn't get updated, it's only when you run
"semanage login -m" that it takes affect.

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Russell Coker <russell@coker.com.au>
Acked-by: Dan Walsh <dwalsh@redhat.com>
2011-08-11 23:35:52 -04:00
..
example Author: Daniel J Walsh 2008-09-15 09:25:33 -04:00
include Last attempt at upstreaming semodule_disable patch. 2010-03-06 17:56:24 -05:00
man libsemanage: Fix the format of the NAME lines 2009-11-27 12:51:57 -05:00
src libsemanage: patch for MCS/MLS in user files 2011-08-11 23:35:52 -04:00
tests regenerate swig bindings for compression support from commit 142bafa24900b5d9480818c9e81670bbeba2b44d 2009-01-12 10:19:58 -05:00
.gitignore Add subdirectory .gitignore files. 2009-10-20 21:25:55 -04:00
ChangeLog Minor version bump for updates as of 2011-08-01 2011-08-01 13:49:21 -04:00
COPYING initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
Makefile initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
VERSION Minor version bump for updates as of 2011-08-01 2011-08-01 13:49:21 -04:00