--- Klaus Weidner <[EMAIL PROTECTED]> wrote:

> It should be ok to use newrole on a local or serial
> console where the
> entire communication chain to the user can be
> relabeled sanely,

Thank heavens STREAMS isn't an issue.

You still have to worry about redirected
descriptors, device buffers (how much
memory in the terminal? Are the function
keys programmable?) and the like. How can
you be sure that "tee" has never been
invoked? Or strace?



Casey Schaufler
[EMAIL PROTECTED]

--
redhat-lspp mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/redhat-lspp

Reply via email to