New type cert_t?

[Daniel J Walsh <dwalsh@xxxxxxxxxx>]

Sorry hit reply instead of new.

> I would like to add a new file type cert_t for ssl cert files, since 
> these are defaulted to usr_t right now.
> Shouldn't these be protected at a higher level?
>
> #
> # cert_t is the type of files in the system certs directories.
> #
> type cert_t, file_type, sysadmfile;
>
> ...
>
> /usr/share/ssl/certs(/.*)?              system_u:object_r:cert_t
>
>
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to 
> majordomo@xxxxxxxxxxxxx with
> the words "unsubscribe selinux" without quotes as the message.



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.