On Fri, Jan 3, 2014 at 6:21 PM, Zbigniew Jędrzejewski-Szmek
<[email protected]> wrote:

>> And not make it SELinux specific.  Maybe the field could be SecurityLabel:
>>
>> That would allow smack to also use the field and any other LSM that used a
>> labeling system.
> This would make it impossible to use the same unit file with more than
> one security framework. This might be desirable, even if they cannot be 
> enabled
> at the same time.

Udev uses:
  SECLABEL{selinux}="foo"
  SECLABEL{smack}="bar"

I think we should be able to distinguish the LSM-module-specific label
type somehow in the key or value.

Kay
_______________________________________________
systemd-devel mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/systemd-devel

Reply via email to