Object range_transition issue when type_transition is involved

[Arnold, Paul C CTR USARMY PEO STRI (US)]

P { MARGIN-BOTTOM: 0px; MARGIN-TOP: 0px }   


All,

 

I am experiencing some issues using range_transition on objects when 
type_transition is also involved on the object.  Specifically, a 
range_transition rule on a target object with a "final" type (e.g. a type which 
went through a type_transition) does not seem to perform the range transition.

 

 

For example, using a private var log type (uses a type_transition from 
var_log_t) does not perform the range transition:

 

range_transition mydomain_t mypriv_var_log_t:file mySystemHigh;

 

 

I am confident my source domain is correct, I believe the issue is with the 
target object.  Policy version is 24.

 

 

Regards,

 


--
Paul Arnold, CISSP
Cole Engineering Services, Inc.

 

smime.p7s
Description: S/MIME cryptographic signature