Re: Fedora 12 and unconfined_u sshdfilter

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Dec 07, 2009 at 12:01:09PM +0000, Moray Henderson (ICT) wrote:
> James Carter wrote:
> >Dan's example used Refpolicy interfaces.  Interfaces are very useful and
> >provide a better layer of abstraction, but they are just m4 macros,
> >which have always been used in SELinux policy.
> >
> >Interfaces should be used as much as possible, but it is not true that
> >you can't mix the old and new ways.
> 
> Mixing the plain rules and the m4 macros didn't work when I tried it - but perhaps I just wasn’t writing it right.  Is there a Refpolicy tutorial anywhere?

I spend a little time today writing about the policy structure in Fedora. Maybe it can help you or others:

http://82.197.205.60/~dgrift/stuff/Managing_a_SELinux_environment_with_Fedora_12.pdf
> 
> 
> Moray.
> "To err is human.  To purr, feline"
> 
> 
> --
> fedora-selinux-list mailing list
> fedora-selinux-list@xxxxxxxxxx
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list

Attachment: pgpjMNMNwG85n.pgp
Description: PGP signature

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux