Re: SE Linux packages of login, sshd, tar, stat, findutils, fileutils, and [xkg]dm

[Russell Coker <russell@coker.com.au>]

On Tue, 27 Nov 2001 18:09, Aaron Lehmann wrote:
> On Tue, Nov 27, 2001 at 03:45:10PM +0100, Russell Coker wrote:
> > tar, stat, findutils, fileutils
>
> not a troll, but why have these been modified? as they are general
> userspace programs with no special priviledges, IMHO it seems like
> very poor design to be modifying them to increase security.
>
> are they modified to add support for new API's/features in SELinux?

Of course.

When atting ACLs to files there's no point unless chmod etc co-operate.  Stat 
has to show the new ACLs too.  Then login needs to change security context 
(so does cron, ssh, etc).

-- 
http://www.coker.com.au/bonnie++/     Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/       Postal SMTP/POP benchmark
http://www.coker.com.au/projects.html Projects I am working on
http://www.coker.com.au/~russell/     My home page