[redhat-lspp] MCS support

[Stephen Smalley]

On Thu, 2005-07-14 at 10:34 -0400, Daniel J Walsh wrote:
> I think you are going to need a way for a customer to easily modify the 
> categories of a process, other then writing policy.
> 
> So If I want my company "confidential documents" available via the 
> internel web, I can allow it. 

You can certainly manually run a process in a given context (if
authorized by policy) via runcon.  But you'd have to set up the init
script to invoke it via runcon then if you wanted it to happen on
startup/restart.

-- 
Stephen Smalley
National Security Agency