Re: Alternative user management approach

[James Morris <jmorris@xxxxxxxxxx>]

On Fri, 24 Jun 2005, Stephen Smalley wrote:

> Yes, but SELinux doesn't isolate those shells even if they have
> different SELinux user identities if they have the same role and domain.
> In fact, you only get real isolation in SELinux between domains (or MLS
> levels, if using MLS).  

But how would this change impact MLS, given that levels are associated 
with SELinux users?


- James
-- 
James Morris
<jmorris@xxxxxxxxxx>



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.