Re: Selinux bash prompt decorations

2006-05-06 Thread Paul Jarc
Steve Grubb <[EMAIL PROTECTED]> wrote: > Its not poor practice to make something usable for people. ... > For the moment, we are going the route of doing this via `id -Z`. But I > thought there was a common problem across secure distributions that we could > create a standard for. TSOL could link

Re: Selinux bash prompt decorations

2006-05-06 Thread Steve Grubb
On Saturday 06 May 2006 19:23, Linda Walsh wrote: > IMO, common core utilities shouldn't be linking with specialized > libraries. We already have many common core utilities linking with security libraries. This is how you make life easier for the end user. > Alternatively, maybe there should be

Re: Selinux bash prompt decorations

2006-05-06 Thread Linda Walsh
IMO, common core utilities shouldn't be linking with specialized libraries. However, if SELinux has been adopted by "Gnu.org" as the standard security mechanism, and SELinux is part of the Linux-Standard-Base then it might not be unreasonable to include support for it. Is SELinux part of the Lin

Re: Selinux bash prompt decorations

2006-04-04 Thread Paul Jarc
Steve Grubb <[EMAIL PROTECTED]> wrote: > On Tuesday 04 April 2006 15:51, Chet Ramey wrote: >> How about commands whose output may be assigned to shell variables? > > Yes, they can be acquired in a number of ways. But what we are trying to do > is > set things up so that people using this in a cla

Re: Selinux bash prompt decorations

2006-04-04 Thread Steve Grubb
On Tuesday 04 April 2006 15:51, Chet Ramey wrote: > Are these values available to the user any other way -- say, through > environment or shell variables? No, they aren't available this way. > How about commands whose output may be assigned to shell variables? Yes, they can be acquired in a numb

Re: Selinux bash prompt decorations

2006-04-04 Thread Ivan Gyurdiev
I had a pretty good idea about the motivation. However, it introduces dependencies on uncommon libraries, and does not have wide applicability, so I am trying to figure out if it can be done using existing mechanisms. Well, this would be an optional feature, only active in a SELinux environ

Re: Selinux bash prompt decorations

2006-04-04 Thread Chet Ramey
Steve Grubb wrote: > On Tuesday 04 April 2006 15:51, Chet Ramey wrote: >> Are these values available to the user any other way -- say, through >> environment or shell variables? > > No, they aren't available this way. > >> How about commands whose output may be assigned to shell variables? > > Y

Re: Selinux bash prompt decorations

2006-04-04 Thread Chet Ramey
> Redhat would like to add more decoration options to the bash prompt. > We want to make the 4 SELinux fields available on the prompt: > > - current SELinux user > - current SELinux role > - current SELinux type > - current MLS clearance > > This would require dependency on libselinux, libsetrans