[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Should this be a dontaudit or an allow in targeted.

To: Stephen Smalley <sds@xxxxxxxxxxxxx>, SE Linux <selinux@xxxxxxxxxxxxx>
Subject: Should this be a dontaudit or an allow in targeted.
From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
Date: Mon, 31 Oct 2005 10:04:34 -0500
Sender: owner-selinux@xxxxxxxxxxxxx
User-agent: Mail/News 1.4.1 (X11/20051008)

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=172040

Basically if a normal uses does a ps -ef on a system, his process will attempt to read the context of udev and friends that are running at a higher sensitivity level. So apps like login, udev and others will generateAVC messages with MCS policy.


--



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.

Follow-Ups:
- Re: Should this be a dontaudit or an allow in targeted.
  - From: Stephen Smalley

Prev by Date: audit logging & log callback for avc
Next by Date: Re: audit logging & log callback for avc
Previous by thread: Re: audit logging & log callback for avc
Next by thread: Re: Should this be a dontaudit or an allow in targeted.
Index(es):
- Date
- Thread

This mailing list archive is a service of Copilot Consulting.