Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <grift> (typeattribute myapp_type-attribute)
- <grift> # 3 different myapp executable file types for 3 ranges
- <grift> (type myapp_c111_type)
- <grift> (type myapp_c122_type)
- <grift> (type myapp_c133_type)
- <grift> (typeattributeset myapp_type_attribute (myapp_c111_type myapp_c122_type myapp_c133_type))
- <grift> # range transitions for foo
- <grift> (rangetransition foo myapp_c111_type process s0:c111)
- <grift> (rangetransition foo myapp_c122_type process s0:c122)
- <grift> (rangetransition foo myapp_c133_type process s0:c133)
- <grift> # allow foo to mapexec all myapp exec typees
- <grift> (allow foo myapp_type_attribut (file (read ioctl lock open execute map)))
- <grift> then you can just chcon -t myapp_c133_type to make foo transition to s0:c133
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement