I had tried the following, but it still complains about the missing kerberos_read_home_content call.
optional_policy(` kerberos_rw_config(vasd_t) kerberos_use(vasd_t) optional_policy(` kerberos_read_home_content(vasd_t) ') ') > Date: Thu, 6 Mar 2014 08:57:27 +0100 > From: mgrepl@xxxxxxxxxx > To: selinux@xxxxxxxxxxxxxxxxxxxxxxx > CC: swazup@xxxxxxxxxxx > Subject: Re: Is there a way to use newer SELinux interface calls, but still compile on machines that don't have them. > > On 03/05/2014 10:35 PM, Jayson Hurst wrote: > > I want to use the kerberos_read_home_content interface method, but it > > seems to be a newer method that doesn't exist on RHEL 6.0, but it does > > on RHEL 6.5. Is there a way to build a single policy that will take > > advantage of this call if its there, but not fail to compile/install > > if it is not? > Yes, > you want to use "optional_policy" block . > > http://mgrepl.wordpress.com/2012/03/23/when-should-you-use-the-optional_policy-block-statement/ |
-- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux