Hello Kanthi,
I have some notes related to SELinux Userspace Object Managers that I'll
post tonight when I get a chance. It seems like every time I get a chance
to put together a model that I thin works, I find that I have to go
further "down the rabbit hole" so to speak to resolve some dependency.
For example - I was not aware that (at least with the current version of
SELinux) you have to modify the system's base policy to create models for
the various objects in userspace that you want to control. That's what
I'm working on at this point, determining the best way to do that.
In the meantime, I've found this to be a valuable resource:
http://selinuxnews.org/wp/index.php/2010/05/12/selinux-notebook-edition-2-released/
Cheers,
-JK
On Fri, 25 Jun 2010, Subramanian Kanthi wrote:
Date: Fri, 25 Jun 2010 13:58:03 +0000
From: Subramanian Kanthi <[email protected]>
Reply-To: [email protected]
To: [email protected]
Subject: RE: Want to Help - qpid newbie
Josh,
I just wanted to check if I can still get involved with the ACL
integration task, I havent found anything else interesting and the roadmap or
the Getting involved page also seems to be missing.
I would appreciate if you could direct me with any other tasks involving C++
and linux.
Regards,
Kanthi.
Date: Wed, 12 May 2010 13:09:11 -0400
From: [email protected]
To: [email protected]
Subject: Re: Want to Help - qpid newbie
Thx for your reply. Iam not an expert with the SELinux API, I
have looked at it before. I chose that because it sounded familiar and I
thot it would be easy to start with. If you can suggest anything better for
I'm actually looking at this again - the trick is understanding userspace
object managers, because there isn't a concise, easy to understand for
SELinux newbies example available. Debugging the policy itself as it
relates to OS-level objects (files, sockets, directories, etc.) is not as
difficult.
I think I've come up with a good example of a userspace object manager -
something that uses SELinux to apply security models to objects that exist
in a program itself. I'm going to work on this for a couple of days and
perhaps we can touch base then if you haven't found something else that
tickles your fancy.
Cheers,
-JK
--
-----
http://www.globalherald.net/jb01
GlobalHerald.NET, the Smarter Social Network! (tm)
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:[email protected]
_________________________________________________________________
Game on: Challenge friends to great games on Messenger
http://go.microsoft.com/?linkid=9734387
--
-----
http://www.globalherald.net/jb01
GlobalHerald.NET, the Smarter Social Network! (tm)
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:[email protected]
