Re: [ovs-dev] [PATCH 2/4] selinux: create a transition type for module loading

Ansis Atteka writes: > On 20 March 2018 at 14:05, Aaron Conole wrote: >> Defines a type 'openvswitch_load_module_t' used exclusively for loading >> modules. This means that the 'openvswitch_t' domain won't require >> modules > > Are you sure the

Re: [ovs-dev] [PATCH 2/4] selinux: create a transition type for module loading

On 20 March 2018 at 14:05, Aaron Conole wrote: > Defines a type 'openvswitch_load_module_t' used exclusively for loading > modules. This means that the 'openvswitch_t' domain won't require > modules Are you sure the bootstrapping to intended openvswitch_load_module_t happens

[ovs-dev] [PATCH 2/4] selinux: create a transition type for module loading

Defines a type 'openvswitch_load_module_t' used exclusively for loading modules. This means that the 'openvswitch_t' domain won't require access to the module loading facility - such access can only happen after transitioning through the 'openvswitch_load_module_exec_t' transition context. A