[Bug 1919] do not change the context from unconfined_t

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Fri Aug 12 11:17:42 EST 2011


https://bugzilla.mindrot.org/show_bug.cgi?id=1919

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org

--- Comment #2 from Damien Miller <djm at mindrot.org> 2011-08-12 11:17:42 EST ---
Is the restriction of changing away from unconfined_t just a matter of
policy? If so, then introducing a short-circuit like this could
severely break people who have modified this policy.

Would it be better to attempt the change in policy but just downgrade
the logit() to a debug3() if the previous type was unconfined_t?

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list