Messages in this thread | | | Subject | Re: [AppArmor 39/45] AppArmor: Profile loading and manipulation,pathname matching | From | Tetsuo Handa <> | Date | Sat, 16 Jun 2007 09:48:39 +0900 |
| |
Crispin Cowan wrote: > In a smaller scale example, I want to share some files with a friend. I > can't be bothered to set up a proper access control system, so I just mv > the files to ~crispin/public_html/lookitme and in IRC say "get it now, > going away in 10 minutes" and then move it out again. Yes, you can > manually address this by running "restorecon ~crispin/public_html". But > AA does this automatically without having to run any commands. If you share ~crispin/public_html/lookitme by making a hard link, does relabeling approach work? I thought SELinux allows only one label for one file. If AA (on the top of SELinux) tries to allow different permissions to ~crispin/public_html/lookitme and its original location, either one of two pathnames won't be accessible as intended, will it? - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |