Re: Sharing partitions between FC4 and FC5

[Stephen Smalley]

On Mon, 2006-04-03 at 18:31 +0100, Ron Yorston wrote:
>  Stephen Smalley wrote:
>  >A MLS compatibility patch went into Linux 2.6.15 and was back ported to
>  >one of the FC4 kernel updates.  Is your FC4 kernel updated?
>  
>  I think I'm entirely up to date:
>  
>     # uname -r
>     2.6.16-1.2069_FC4
>     # rpm -qa | grep selinux
>     selinux-policy-targeted-1.27.1-2.22
>     libselinux-devel-1.23.11-1.1
>     libselinux-1.23.11-1.1 
Only the kernel matters.  2.6.15 and later should accept a MLS suffix
(the :s0 part) on the context of on-disk inodes even if MLS is disabled
in the policy.  Bugzilla it.

-- 
Stephen Smalley
National Security Agency