[redhat-lspp] MCS support

[James Morris]

On Thu, 14 Jul 2005, Daniel J Walsh wrote:

> If I wanted allow my ftp server to read "Company Confidential" 
> documents, what would I need to do?
> "root" login would be eligible for all categories.  User login would be 
> governed by the usermap database.

The ftpd_t domain would need to be labeled with the category.

Have a look at the latest TCS policy (I think you were cc'd a copy).

> In MCS SO is both system high  and system low, since everything runs at s0.

There is only s0, nothing else is possible under MCS.


- James
-- 
James Morris
<jmorris at redhat.com>