[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Why "id -Z" get the current process security context but says "of th
|
From: |
Pádraig Brady |
|
Subject: |
Re: Why "id -Z" get the current process security context but says "of the current user" in help? |
|
Date: |
Thu, 16 Jan 2014 12:07:02 +0000 |
|
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130110 Thunderbird/17.0.2 |
On 01/16/2014 06:24 AM, Jarkko Sakkinen wrote:
> Hi
>
> On Thu, Jan 16, 2014 at 02:16:28AM +0000, Pádraig Brady wrote:
>> So I suppose we might change the --help docs etc. to say
>> _process_ rather than _user_. Is SMACK64EXEC a common
>> label to have set on the id executable? Jarkko I don't suppose
>> there is any way to avoid that?
>
> I don't see any reason why anyone would set SMACK64EXEC for 'id'. There's
> no realistic use case to do that.
OK it's an edge case so we can set the docs accordingly.
BTW I notice SELinux' getprevcon() which is the same as getcon()
but gets the context before the last exec.
If SMACK had an equivalent would that be more appropriate to use here?
thanks,
Pádraig.