commit | 4f78e1225cf16c8acbb8e9d9b849977ec04594df | [log] [tgz] |
---|---|---|
author | Stephen Smalley <sds@tycho.nsa.gov> | Fri Jan 13 08:16:58 2012 -0500 |
committer | Stephen Smalley <sds@tycho.nsa.gov> | Tue Jan 24 14:47:42 2012 -0500 |
tree | 867f1898f58a9bd835ce0d618426f8c01fb36130 | |
parent | a669206dc91323e664a84b2a4ca170ec0332c926 [diff] |
Extend forkAndSpecialize to take additional inputs and to set the SELinux security context. forkAndSpecialize presently sets the DAC credentials for the app process. Modify it to invoke libselinux to set the SELinux security context as well. Extend it to take additional inputs from the caller in order to provide more selectors for deciding what SELinux security context to use. Change-Id: I2611671ad6f10ce3d8cbda8471bcacb8c9955546