Preferred subj= with multiple LSMs

William Roberts bill.c.roberts at gmail.com
Thu Jul 18 15:01:01 UTC 2019


<snip>

> > >>>> the following (something between option #2 and #3):
> > >>>>   subj1_lsm=smack subj1=<smack_label> subj2_lsm=selinux
> > >>>>
> > >>>> subj2=<selinux_label> ...
> > >>> If it's not a subj= field why use the indirection?
> > >>>
> > >>>         subj_smack=<smack_label> subj_selinux=<selinux_label>

FWIW +1 on this approach.

<snip>



More information about the Linux-security-module-archive mailing list