Re: Sharing partitions between FC4 and FC5

[Stephen Smalley <sds tycho nsa gov>]

On Mon, 2006-04-03 at 18:31 +0100, Ron Yorston wrote:
> Stephen Smalley wrote:
> >A MLS compatibility patch went into Linux 2.6.15 and was back ported to
> >one of the FC4 kernel updates.  Is your FC4 kernel updated?
> 
> I think I'm entirely up to date:
> 
>    # uname -r
>    2.6.16-1.2069_FC4
>    # rpm -qa | grep selinux
>    selinux-policy-targeted-1.27.1-2.22
>    libselinux-devel-1.23.11-1.1
>    libselinux-1.23.11-1.1

Only the kernel matters.  2.6.15 and later should accept a MLS suffix
(the :s0 part) on the context of on-disk inodes even if MLS is disabled
in the policy.  Bugzilla it.

-- 
Stephen Smalley
National Security Agency