Does MLS still work in the current version of SElinux or is it still not going to work the the X window system?

[Daniel Skip]

I was just wondering if you can still configure MLS in the current version of SElinux or is still kind of broken?

[Zdenek Pytela]

On Sun, Jun 27, 2021 at 7:46 AM Daniel Skip  wrote:
> I was just wondering if you can still configure MLS in the current version
> of SElinux or is still kind of broken?

Hi,

There is an ongoing effort to allow users to use X window with MLS policy
under some conditions, notably using startx instead of a xdm login. You can
expect updates in rawhide in a few weeks.

_______________________________________________
> selinux mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]...
> Do not reply to spam on the list, report it:
> https://pagure.io/fedora-infrastructure

[Robert Moskowitz]

When I see "MLS" I think of:

https://datatracker.ietf.org/wg/mls/about/

And wonder how SElinux plays into that....

:)

On 6/28/21 4:47 AM, Zdenek Pytela wrote:
> On Sun, Jun 27, 2021 at 7:46 AM Daniel Skip <[e-mail] 
> > wrote:
> I was just wondering if you can still configure MLS in the current
> version of SElinux or is still kind of broken?
>
> Hi,
>
> There is an ongoing effort to allow users to use X window with MLS 
> policy under some conditions, notably using startx instead of a xdm 
> login. You can expect updates in rawhide in a few weeks.
> _______________________________________________
> selinux mailing list -- [e-mail]
> <mailto:[e-mail]>
> To unsubscribe send an email to
> [e-mail]
> <mailto:[e-mail]>
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> <https://docs.fedoraproject.org/en-US/project/code-of-conduct/>
> List Guidelines:
> https://fedoraproject.org/wiki/Mailing_list_guidelines
> <https://fedoraproject.org/wiki/Mailing_list_guidelines>
> List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]
> <https://lists.fedoraproject.org/archives/list/[e-mail]>
> Do not reply to spam on the list, report it:
> https://pagure.io/fedora-infrastructure
> <https://pagure.io/fedora-infrastructure>
>
>
>
> --
>
> Zdenek Pytela
> Security SELinux team
>
> selinux mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/[e-mail]...
> Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure