There are two things:
1) relabeling (non-tranquility) is very problematic in general because
revocation is hard (and non-solved in Linux). So you would have to
address concerns about that.
2) Whether this would pass certification depends on a lot of factors
(like the specific requirements - CC is just a process not a single set
of requirements). I don't know enough to really guess.
More to the point, though, the requirements in those documents are
outdated at best. I don't think it is worth worrying over.
Probably not - you would likely want it to be a label that can't be read
or written by anything, only relabeled by the daemon.
Karl
-
