Changeset 2674

Timestamp:

05/06/08 09:37:05 (7 months ago)

Author:

pebenito

Message:

trunk: X application data class from Eamon Walsh and Ted Toth.

Files:

• trunk/Changelog (modified) (1 diff)
• trunk/policy/flask/access_vectors (modified) (1 diff)
• trunk/policy/flask/security_classes (modified) (1 diff)
• trunk/policy/mls (modified) (1 diff)

trunk/Changelog

@@ +1 @@
+- X application data class from Eamon Walsh and Ted Toth.
-- Move user roles into individual modules.
-- Make hald_log_t a log file.

trunk/policy/flask/access_vectors

@@ -776 +776 @@
-        recv
-}
+
+class x_application_data
+{
+        paste
+        paste_after_confirm
+        copy
+}

trunk/policy/flask/security_classes

@@ -115 +115 @@
-class x_event                   # userspace
-class x_synthetic_event         # userspace
+class x_application_data        # userspace
-
-# FLASK

trunk/policy/mls

@@ -569 +569 @@
-
-
+#
+# MLS policy for the x_application_data class
+#
+
+# the x_application_data "paste" ops (explicit single level)
+mlsconstrain x_application_data { paste }
+        ( l1 eq l2 );
+
+# the x_application_data "paste_after_confirm" ops (downgrade permitted)
+mlsconstrain x_application_data { paste_after_confirm }
+        ( l1 domby l2 );
+
-
-#