Does MLS still work in the current version of SElinux or is it still not going to work the the X window system?

[Daniel Skip]

I was just wondering if you can still configure MLS in the current version of SElinux or
is still kind of broken?

[Zdenek Pytela]

On Sun, Jun 27, 2021 at 7:46 AM Daniel Skip <eliascaplan7(a)gmail.com&gt; wrote:

>  I was just wondering if you can still configure MLS in the current
> version
>  of SElinux or is still kind of broken?
>  
Hi,

There is an ongoing effort to allow users to use X window with MLS policy
under some conditions, notably using startx instead of a xdm login. You can
expect updates in rawhide in a few weeks.

_______________________________________________
>  selinux mailing list -- selinux(a)lists.fedoraproject.org
>  To unsubscribe send an email to selinux-leave(a)lists.fedoraproject.org
>  Fedora Code of Conduct:
>  https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
>  https://lists.fedoraproject.org/archives/list/[e-mail]...
>  Do not reply to spam on the list, report it:
>  https://pagure.io/fedora-infrastructure
>  

-- 

Zdenek Pytela
Security SELinux team

[Robert Moskowitz]

When I see "MLS" I think of:

https://datatracker.ietf.org/wg/mls/about/

And wonder how SElinux plays into that....

:)

On 6/28/21 4:47 AM, Zdenek Pytela wrote:
>  On Sun, Jun 27, 2021 at 7:46 AM Daniel Skip <eliascaplan7(a)gmail.com 
>  <mailto:[e-mail]>> wrote:
>
>      I was just wondering if you can still configure MLS in the current
>      version of SElinux or is still kind of broken?
>
>  Hi,
>
>  There is an ongoing effort to allow users to use X window with MLS 
>  policy under some conditions, notably using startx instead of a xdm 
>  login. You can expect updates in rawhide in a few weeks.
>
>      _______________________________________________
>      selinux mailing list -- selinux(a)lists.fedoraproject.org
>      <mailto:[e-mail]>
>      To unsubscribe send an email to
>      selinux-leave(a)lists.fedoraproject.org
>      <mailto:[e-mail]>
>      Fedora Code of Conduct:
>      https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>      <https://docs.fedoraproject.org/en-US/project/code-of-conduct/>
>      List Guidelines:
>      https://fedoraproject.org/wiki/Mailing_list_guidelines
>      <https://fedoraproject.org/wiki/Mailing_list_guidelines>
>      List Archives:
>      https://lists.fedoraproject.org/archives/list/[e-mail]...
>     
> <https://lists.fedoraproject.org/archives/list/[e-mail]...
>      Do not reply to spam on the list, report it:
>      https://pagure.io/fedora-infrastructure
>      <https://pagure.io/fedora-infrastructure>
>
>
>
>  -- 
>
>  Zdenek Pytela
>  Security SELinux team
>
>  _______________________________________________
>  selinux mailing list -- selinux(a)lists.fedoraproject.org
>  To unsubscribe send an email to selinux-leave(a)lists.fedoraproject.org
>  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]...
>  Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure