commit 7633083b9890ff9eb2576de9edabd8878d1231ac
Author: Barbora Ancincova <bancinco(a)redhat.com>
Date: Sun Aug 10 23:28:06 2014 +0200
Added an xref to the mls section.
en-US/Contexts_and_Attributes.xml | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
---
diff --git a/en-US/Contexts_and_Attributes.xml b/en-US/Contexts_and_Attributes.xml
index 101a3f6..aeee61e 100644
--- a/en-US/Contexts_and_Attributes.xml
+++ b/en-US/Contexts_and_Attributes.xml
@@ -85,7 +85,7 @@ system_u system_u s0-s0:c0.c1023 *
If the category set is a contiguous series, it
can be abbreviated. For example, <systemitem>c0.c3</systemitem> is the same as
<systemitem>c0,c1,c2,c3</systemitem>. The
<filename>/etc/selinux/targeted/setrans.conf</filename> file maps levels
(<systemitem>s0:c0</systemitem>) to human-readable form (that is
<computeroutput>CompanyConfidential</computeroutput>). In &PRODUCT;,
targeted policy enforces MCS, and in MCS, there is just one sensitivity,
<systemitem>s0</systemitem>. MCS in &PRODUCT; supports 1024 different
categories: <systemitem>c0</systemitem> through to
<systemitem>c1023</systemitem>.
<systemitem>s0-s0:c0.c1023</systemitem> is sensitivity
<systemitem>s0</systemitem> and authorized for all categories.
</para>
<para>
- MLS enforces the Bell-La Padula Mandatory Access Model, and is used in Labeled
Security Protection Profile (LSPP) environments. To use MLS restrictions, install the
<package>selinux-policy-mls</package> package, and configure MLS to be the
default SELinux policy. The MLS policy shipped with &PRODUCT; omits many program
domains that were not part of the evaluated configuration, and therefore, MLS on a desktop
workstation is unusable (no support for the X Window System); however, an MLS policy from
the <ulink
url="http://oss.tresys.com/projects/refpolicy">upstream SELinux
Reference Policy</ulink> can be built that includes all program domains. <!--For
more information on MLS configuration, see <xref linkend="mls"/>.-->
+ MLS enforces the Bell-La Padula Mandatory Access Model, and is used in Labeled
Security Protection Profile (LSPP) environments. To use MLS restrictions, install the
<package>selinux-policy-mls</package> package, and configure MLS to be the
default SELinux policy. The MLS policy shipped with &PRODUCT; omits many program
domains that were not part of the evaluated configuration, and therefore, MLS on a desktop
workstation is unusable (no support for the X Window System); however, an MLS policy from
the <ulink
url="http://oss.tresys.com/projects/refpolicy">upstream SELinux
Reference Policy</ulink> can be built that includes all program domains. For more
information on MLS configuration, see <xref linkend="mls"/>.
</para>
</listitem>
</varlistentry>