On Mon, Dec 07, 2009 at 12:01:09PM +0000, Moray Henderson (ICT) wrote: > James Carter wrote: > >Dan's example used Refpolicy interfaces. Interfaces are very useful and > >provide a better layer of abstraction, but they are just m4 macros, > >which have always been used in SELinux policy. > > > >Interfaces should be used as much as possible, but it is not true that > >you can't mix the old and new ways. > > Mixing the plain rules and the m4 macros didn't work when I tried it - but perhaps I just wasn’t writing it right. Is there a Refpolicy tutorial anywhere? I spend a little time today writing about the policy structure in Fedora. Maybe it can help you or others: http://82.197.205.60/~dgrift/stuff/Managing_a_SELinux_environment_with_Fedora_12.pdf > > > Moray. > "To err is human. To purr, feline" > > > -- > fedora-selinux-list mailing list > fedora-selinux-list@xxxxxxxxxx > https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Attachment:
pgpjMNMNwG85n.pgp
Description: PGP signature
-- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
