PERFORCE change 18022 for review

[Robert Watson]

http://people.freebsd.org/~peter/p4db/chv.cgi?CH=18022

Change 18022 by rwatson at rwatson_tislabs on 2002/09/23 15:54:35

	A few more bits and bobs necessary to get KDE running with MLS.

Affected files ...

.. //depot/projects/trustedbsd/misc/demo-20020725/x11_with_mls.txt#3 edit

Differences ...

==== //depot/projects/trustedbsd/misc/demo-20020725/x11_with_mls.txt#3 (text+ko) ====

@@ -12,13 +12,14 @@
     Note: this will bypass MLS protection of the devices, and is not
     a good idea.
 
-(2) Labeling of /tmp and /tmp/.X11-unix.  It is necessary for this
-    directory to be writable by any user making use of X.  As with
+(2) Labeling of /tmp, /tmp/.X11-unix, and /tmp/.ICE-unix.  It is necessary
+    for this directory to be writable by any user making use of X.  As with
     (1), the work-around easiest for perform for a demonstration
     is:
 
-	mkdir -p /tmp/.X11-unix
-	setfmac mls/equal /tmp /tmp/.X11-unix
+	mkdir -p /tmp/.X11-unix /tmp/.ICE-unix
+	setfmac mls/equal /tmp /tmp/.X11-unix /tmp/.ICE-unix
+	chmod a+rwxt /tmp/.X11-unix /tmp/.ICE-unix
 
     Some applications may also require /tmp/.ICE-unix which should
     be similarly labeled.
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message