unconfined_domtrans_to strict equivalent

Clarkson, Mike R (US SSA) mike.clarkson at baesystems.com
Wed Nov 28 01:33:50 UTC 2007


I'm in the process of converting from a targeted-mls to a strict-mls
policy. In the targeted policy, when users log in they enter into the
unconfined_t domain. Therefore several of my domains, which are started
up from the unconfined_t domain, use the unconfined_domtrans_to
interface to allow automatic domain transitions from the unconfined
domain to my domains.

After converting, these domains will be started from one of the user
domains defined in the strict policy (either staff_t or sysadm_t). I've
searched through the userdomain.if file but haven't found an equivalent
interface to unconfined_domtrans_to. Can someone point me in the right
direction?

Thanks





More information about the fedora-selinux-list mailing list