Wart wrote:
Paul Howarth wrote:
Bear in mind that there should be a crossfire_disable_trans boolean that
would turn off the policy (or rather the transition to crossfire_t) when
set, without having to uninstall the policy.
Is it enough to add the boolean to crossfire.te, or do I need to add
anything in the .if file as well?
type crossfire_t;
type crossfire_exec_t;
domain_type(crossfire_t)
init_daemon_domain(crossfire_t, crossfire_exec_t)
bool crossfire_disable_trans;
You shouldn't need to change anything; check the output of "getsebool
-a" with your existing policy - you should already have the boolean,
which should be defined because you used init_daemon_domain.
Paul.
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
