From selinux Thu Jan 24 18:48:47 2008 From: Steve G Date: Thu, 24 Jan 2008 18:48:47 +0000 To: selinux Subject: Re: I am more worried about open then read and write, SELinux needs open access checks. Message-Id: <964182.26945.qm () web51502 ! mail ! re2 ! yahoo ! com> X-MARC-Message: https://marc.info/?l=selinux&m=120120606114155 > I would like to propose that we add one or more avc's to deal with > opening a file. open or open_read open_write. There are situations where apps should only do an open_append to make sure they don't erase anything. syslog, auditd, apache are a few apps that come to mind. -Steve ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.