selinux/mcstrans
Dominick Grift 8c1282b0ec mcstrans: start early and stop late
It stopped too early, exposing a bug in sudo selinux_restore_tty():

SELINUX_ERR op=setxattr invalid_context="wheel.id:wheel.role:users.terminals.pty.pty_file:SystemLow"
avc:  denied  { mac_admin } for  pid=859 comm="sudo" capability=33 scontext=wheel.id:wheel.role:sudo.wheel.subj:s0 tcontext=wheel.id:wheel.role:sudo.wheel.subj:s0 tclass=capability2 permissive=0

If we want to be able to reference human readable contexts in SELinuxContext= and nspawn -Z and -L then we need mcstrans ASAP

v2: stop late, but do stop
Signed-off-by: Dominick Grift <dac.override@gmail.com>
Acked-by: Petr Lautrbach <plautrba@redhat.com>
2020-05-13 11:09:03 +02:00
..
man mcstrans: Add reference to setools.conf man page in the daemon one 2019-07-18 09:51:43 -05:00
share Fix many misspellings 2019-09-18 22:47:35 +02:00
src mcstrans: start early and stop late 2020-05-13 11:09:03 +02:00
utils tree-wide: replace last occurrences of security_context_t 2020-03-25 09:54:21 -05:00
COPYING Move policycoreutils/mcstrans to mcstrans. 2016-11-16 11:19:50 -05:00
Makefile Add stub make test targets to new subdirs 2016-11-16 11:20:05 -05:00
TODO Move policycoreutils/mcstrans to mcstrans. 2016-11-16 11:19:50 -05:00
VERSION Update VERSIONs to 3.0 for release. 2019-11-28 13:46:48 +01:00