Re: [PATCH] libsepol: support for permissive types

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, 2008-03-12 at 10:37 -0400, Eric Paris wrote:
> On Wed, 2008-03-12 at 08:49 -0400, Stephen Smalley wrote:
> > On Tue, 2008-03-11 at 17:28 -0400, Eric Paris wrote:
> 
> > > ******
> > > module define_alias 1.0;
> > > 
> > > require {
> > > 	type type1_t;
> > > }
> > > 
> > > type type_t;
> > > typealias type_t alias alias_t;
> > 
> > Not sure what that require is for - remnant of earlier test?
> 
> I couldn't get a module to compile without a requires.  So I just threw
> one in, type1_t is just one of the 2 types I had in my base module.

Ok - limitation of checkmodule then.  Most policy modules automatically
pick up at least requires on kernel classes/perms via policy_module()
interface.

-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.

[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux