On Mon, Mar 28, 2005 at 08:36:32AM -0500, Stephen Smalley wrote:
On Mon, 2005-03-28 at 11:04 +0100, Luke Kenneth Casson Leighton
wrote:
> On Sun, Mar 27, 2005 at 11:57:35PM -0500, Ivan Gyurdiev wrote:
>
> > There can't be more than one file_type_auto_trans on the same folder
> > type (right?).
>
> bizarrely, no.
>
> i believe this issue was raised some months ago, with the
> "alternative file context" thing.
>
> if file_type_auto_trans also took an executable [domain] as an
> additional argument, i believe you stand a chance of achieving
> what you seek.
file_type_auto_trans() is based on the domain of the creating process,
the type of the parent directory, and optionally the class of the new
file.
brain-lapse. of course it is. duh.
[description of how to make programs security-aware]
so the issue ivan describes _can_ be solved.
... question: in what ways do you ensure that a security-aware
compromised program is only allowed to create certain filetypes?
is it to do with using compute_av()?
l.