[refpolicy] mmcs patch
Christopher J. PeBenito
cpebenito at tresys.com
Mon Jun 28 08:27:53 CDT 2010
On Mon, 2010-06-28 at 20:02 +1000, Russell Coker wrote:
> The attached patch adds Mandatory MCS functionality if the policy is built
> with distro_debian defined.
> Should we change that to enable_mandatory_mcs or something so that
> distributions other than Debian can use it?
> In any case I'd like to have it in the repository so it can be examined by
> more people, maybe improved, maybe inspire others to do different and maybe
> better things.
If I recall correctly, there was a lot of opposition to this change,
since MCS was supposed to be discretionary. So I'll wait for comments.
Perhaps with it being optional now, there won't be objections.
In any case, In order for me to merge it, I'd rather see it as a
build.conf configuration option not tied to distribution. So
enable_mmcs or something similar, as you mentioned above.
Tresys Technology, LLC
www.tresys.com | oss.tresys.com
More information about the refpolicy