SELinux and the Desktop

[Stephen Smalley]

On Thu, 2004-10-14 at 11:15, Valdis.Kletnieks at vt.edu wrote:
> On Wed, 13 Oct 2004 13:59:02 EDT, Stephen Smalley said:
> 
> > not directly visible to the OS itself.  dbus and X (but unfortunately
> > not the X in Fedora yet) have been modified to use that API to enforce
> > policy over their abstractions. 
> 
> Where might one find a patch for this that has a snowball's chance of working
> on an xorg X source tree?

See http://marc.theaimsgroup.com/?l=selinux&m=108483628322478&w=2.  It
is available in a branch of the xorg CVS tree.  But unfortunately, the
developer of security-enhanced X has moved on to another office and it
hasn't been maintained since July, AFAIK.

-- 
Stephen Smalley <sds at epoch.ncsc.mil>
National Security Agency