dynamic context transitions
elrond at samba-tng.org
Wed Nov 3 10:51:27 GMT 2004
On Mon, Nov 01, 2004 at 06:45:38PM +0000, Luke Kenneth Casson Leighton wrote:
> type1_t: access to samba configuration files [only!] seteuid: 0
> type2_t: access to user files [only!] seteuid: NNNN
> type3_t: access to pretty much nothing (except that needed for cleanup
> the loop is type1_t, call become_user() -> goes to type2_t
> then call unbecome_user() -> transitions to type3_t and does cleanup
> (e.g. frees any alloc'd memory associated with user - if necessary)
> and then transitions to type1_t, ready for the next incoming SMB
Yikes... I like this!
If anyone from selinux wants to help, we can try this all
out in Samba TNG!
More information about the samba-technical