fedora-selinux November 2007 archive
Main Archive Page > Month Archives  > fedora-selinux archives
fedora-selinux: unconfined_domtrans_to strict equivalent

unconfined_domtrans_to strict equivalent

From: Clarkson, Mike R (US SSA) <mike.clarkson_at_nospam>
Date: Wed Nov 28 2007 - 01:33:50 GMT
To: <fedora-selinux-list@redhat.com>


I'm in the process of converting from a targeted-mls to a strict-mls policy. In the targeted policy, when users log in they enter into the unconfined_t domain. Therefore several of my domains, which are started up from the unconfined_t domain, use the unconfined_domtrans_to interface to allow automatic domain transitions from the unconfined domain to my domains.

After converting, these domains will be started from one of the user domains defined in the strict policy (either staff_t or sysadm_t). I've searched through the userdomain.if file but haven't found an equivalent interface to unconfined_domtrans_to. Can someone point me in the right direction?

Thanks -- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list