James Carter wrote: >Dan's example used Refpolicy interfaces. Interfaces are very useful and >provide a better layer of abstraction, but they are just m4 macros, >which have always been used in SELinux policy. > >Interfaces should be used as much as possible, but it is not true that >you can't mix the old and new ways. Mixing the plain rules and the m4 macros didn't work when I tried it - but perhaps I just wasn’t writing it right. Is there a Refpolicy tutorial anywhere? Moray. "To err is human. To purr, feline" -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list