On Wed, 2005-05-25 at 12:47 -0400, Stephen Smalley wrote: > BTW, SELinux does support dynamic context transitions these days via > setcon(3). Not that that I'd recommend using it over exec-based > transitions, mind you, but it does exist. Also, there is runcon(1) if you just want to launch a given program in a particular domain in one instance (e.g. for the chroot'ed environment) while not having it run in that domain in other cases. -- Stephen Smalley National Security Agency
This archive was generated by hypermail 2.1.3 : Wed May 25 2005 - 10:10:21 PDT