Security Enhanced Linux
What's New
Frequently Asked Questions
Background
Documents
License
Download
Participating
Mail List
Archives
Remaining Work
Contributors
Related Work
Press Releases
Information Assurance Research
NIARL In-house Research Areas
Mathematical Sciences Program
Sabbaticals
Computer & Information Sciences Research
Technology Transfer
Advanced Computing
Advanced Mathematics
Communications & Networking
Information Processing
Microelectronics
Other Technologies
Technology Fact Sheets
Publications
Related Links
|
SELinux Mailing List
subject: Man page fix for matchpatchcon Date: Thu, 06 Dec 2007 13:11:01 -0500
-----BEGIN PGP SIGNATURE-----
iD8DBQFHWDs1rlYvE4MpobMRAmDBAKC3EnBRz81RxtgLKcMSHnUvMqNJkwCcCyx+
QgfQjemToY0sD9lksoYX/wo=
diff --exclude-from=exclude -N -u -r nsalibselinux/man/man8/matchpathcon.8 libselinux-2.0.45/man/man8/matchpathcon.8 --- nsalibselinux/man/man8/matchpathcon.8 2007-08-03 16:02:56.000000000 -0400@@ -6,7 +6,12 @@ .B matchpathcon [-V] [-N] [-n] [-f file_contexts_file ] [-p prefix ] filepath... .SH "DESCRIPTION" .B matchpathcon -Prints the file path and the default security context associated with it. +Queries the system and prints the default security context associated with the filepath. + +Note: Identical paths can have different security contexts, depending on the file type. (regular file, directory, link file, char file ...) + +matchpathcon will check the system default context using the file type if the file exists. If the file does not exist, it will get the context of a regular file. + .SH OPTIONS .B \-n Do not display path.
-- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Todd Miller <Tmiller_at_tresys.com> subject: RE: Man page fix for matchpatchcon Date: Thu, 6 Dec 2007 16:16:02 -0500
diff --exclude-from=exclude -N -u -r nsalibselinux/man/man8/matchpathcon.8 libselinux-2.0.45/man/man8/matchpathcon.8 --- nsalibselinux/man/man8/matchpathcon.8 2007-08-03 16:02:56.000000000 -040011:22:40.000000000 -0500 @@ -6,7 +6,12 @@ .B matchpathcon [-V] [-N] [-n] [-f file_contexts_file ] [-p prefix ] filepath... .SH "DESCRIPTION" .B matchpathcon -Prints the file path and the default security context associated with it. +Queries the system and prints the default security context associated with the filepath. This should be a lower case 'q' since it is not the start of the sentence.
+ Should probably use ".B matchpathcon" here.
+ -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Stephen Smalley <sds_at_tycho.nsa.gov> subject: RE: Man page fix for matchpatchcon Date: Fri, 07 Dec 2007 15:13:03 -0500
Also, this last part wasn't right - if the file doesn't exist, then matchpathcon passes a 0 mode to matchpathcon(3), which in turn does no file mode/type matching at all in that case (so any entry will match). Applied those fixes and committed.
> -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.
|
|
Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009 |