On Tue, 2005-07-05 at 15:15 -0400, Daniel J Walsh wrote: > > This would potentially eliminate the 1000's of file contexts files problem, > since almost all users would map to the default user_r and user_home_t... > for his home dir file context. But isn't a large part of the point of this to ensure that e.g. grissom can never access medical records stored in welby's home directory, even if welby accidentally sets the DAC permissions to allow it? Or is something else in this scheme preventing that?
Attachment:
signature.asc
Description: This is a digitally signed message part