Hi,
As we know, In SELinux, when we first access a file,
the file system should first send the security context
of the file from its extended attribute to security
server. the security server will give a SID back to
the file for later use. Since then, every time when we
access the file, there is no need for the file system
to send the security context of the file again.
instead, it will send the SID of the file to security
server.
But, Where is the SID (which is assigned by security
server for the file) stored in the file system? and
How is the SID calculated?
As for process in selinux, Where is the SID (which
also is assigned by security server ) stored with the
process?
Is the security context of the process only exist in
the selinux security server and the process only need
to deal with the SID that is related to the security
context?
Will the process itself handle its own security
context?
Thank you.
=====
Best Regards,
Park Lee
__________________________________
Do you Yahoo!?
Dress up your holiday email, Hollywood style. Learn more.
http://celebrity.mail.yahoo.com
|
