Re: unreasonably long SE Linux context display

[Stephen Smalley <sds@xxxxxxxxxxxxx>]

On Mon, 2005-10-31 at 10:18 -0600, Joe Nall wrote:
> On Oct 31, 2005, at 1:11 AM, Russell Coker wrote:
> 
> > Would it be possible to use shorter names in the setrans.conf file  
> > than
> > SystemLog and SystemHigh?  For example could we have "Low-High" or
> > "sLow-sHigh" instead?
> 
> How about adding a capability to name ranges and shorten
>   "SystemLow-SystemHigh"
> to
>   "all"
> or even
>   "*"

Originally, Dan was just mapping it to "SystemHigh", but that caused
problems on the reverse translation ("SystemHigh" ==
"SystemHigh-SystemHigh", not "SystemLow-SystemHigh").  I suppose you can
define "all" or "*" any way you want in setrans.conf, but it seems prone
to similar confusion.

-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.