Re: policy patches

On Sun, 2005-01-02 at 07:03, Russell Coker wrote:
> network_macros.diff makes a cosmetic change to the network macros.

I don't see the benefit of this, the compiler will take care of the duplicate rules, and it is easier to maintain as is.

If this were the only thing producing duplicate rules, then it might be worthwhile.

If we were going to change it, wouldn't this be better anyway?

define(`can_network_tcp',`
base_can_network($1, tcp, `$2')
allow $1 self:tcp_socket { listen accept connect }; ')

-- 
James Carter <jwcart2@epoch.ncsc.mil>
National Security Agency

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.