| Main Archive Page > Month Archives > selinux archives |
Re: type bounds audit messages
From: Steve Grubb <sgrubb_at_nospam>Date: Tue Jun 16 2009 - 15:23:52 GMT
To: Eric Paris <eparis@redhat.com>
On Tuesday 16 June 2009 10:55:33 am Eric Paris wrote:
> > > I feel good for all but the { setattr write }
> > >
> > > It's a new message, we have no parsers which need the old format, how
> > > would others feel about
> > >
> > > perm="setattr,write" ?
> >
> > I'd recommend losing the quotes. I think you are doing this because of
> > untrusted_string, but I doubt the user can influence this.
>
> I'm starting to buy into the 'quotes makes it easy to know it's a
> string' argument from jdennis.
Any field that has a value starting and ending with quotes means that its encoded due to untrusted users having influence over it. That is the parsing rule.
-Steve -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.