On Fri, 2006-06-16 at 15:44 -0400, Daniel J Walsh wrote: > We need to be able to set the maximum login sensitivity on a machine in > such a way that the login programs and > network aware applications enforce this. How do you go about doing this?
If you want it applied system-wide rather than per-user, they are automatically bounded by their high/clearance level, so if you set the range_transition for them in policy (or explicitly run them in the desired range in some manner, e.g. via runcon), then they shouldn't be able to transition above that high/clearance. -- Stephen Smalley National Security Agency -- redhat-lspp mailing list [email protected] https://www.redhat.com/mailman/listinfo/redhat-lspp
