On Sat, Dec 28, 2013 at 2:30 PM, Lennart Poettering
<[email protected]> wrote:
> On Fri, 27.12.13 23:26, [email protected] ([email protected]) wrote:
>> This permit to let system administrators decide of the domain of a service.
>> This can be used with templated units to have each service in a différent
>> domain ( for example, a per customer database, using MLS or anything ),
>> or can be used to force a non selinux enabled system (jvm, erlang, etc)
>> to start in a different domain for each service.
>
> Hmm, so far (as I understood it) the SELinux guys always wanted to make
> sure that label configuration stays in the the selinux database and
> nowhere else.
>
> I'd like Dan Walsh's opinion whether this addition fits into what the
> SELinux guys want or not. Dan?
I guess it matches a bit what we do for udev with SECLABEL{selinux}=.
Kay
_______________________________________________
systemd-devel mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/systemd-devel
