Is there a way to set default MCS labels for file creation?

Bruno Wolff III bruno at wolff.to
Sat Jun 23 17:19:13 UTC 2007


On Sat, Jun 23, 2007 at 11:15:11 -0400,
  James Morris <jmorris at namei.org> wrote:
> 
> Not for MCS labels, though.  MCS labels can't currently be applied to 
> directories, although the potentially could, and then files created under 
> the directories could receive MCS labels based upon the parent directory 
> and the creating process.  The idea was to keep it as absolutely simple as 
> possible and for users to explicitly label each object with MCS labels (so 
> there are no inheritance semantics, for example).

Thanks for the explanation.




More information about the fedora-selinux-list mailing list