Research Menu

.
Skip Search Box

SELinux Mailing List

Re: policy compile fixes

From: James Carter <jwcart2_at_epoch.ncsc.mil>
Date: Thu, 14 Oct 2004 16:23:17 -0400


Merged with the exception of the cups.fc stuff.

Currently, the policy Makefile is not set up so that the fc files can use an ifdef(`somefile.te',

If there is interest in adding that support though, it can be done.

On Thu, 2004-10-14 at 07:35, Thomas Bleher wrote:
> This patch fixes a few compile problems with latest policy:
> consoletype.te: firstboot.te may not be there
> cups.fc: cupsd_config only exists if hald.te is available
> apache_macros.te: allow_ypbind is only declared if ypbind.te is
> available
>
> Add a few file_contexts.
>
> Conditionalize the file_type_auto_trans rule in apache.te, otherwise log
> files get created with the wrong context.
>
> Add can_exec($1_ssh_t, { shell_exec_t bin_t }), it is needed for some
> programs like x11-ssh-askpass (and I suspect sftp_server).
>
> Please apply.
> Thomas

-- 
James Carter <jwcart2@epoch.ncsc.mil>
National Security Agency

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
Received on Thu 14 Oct 2004 - 16:24:27 EDT
 

Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009

 
bottom

National Security Agency / Central Security Service