On Fri, 2008-04-18 at 11:55 -0400, Christopher J. PeBenito wrote: > On Mon, 2008-04-14 at 18:52 -0400, rob myers wrote: > > While trying to create a domain that could read all the files > > in /var/log, I noticed that hald_log_t files do not have the logfile > > attribute. This appears to be intentional because the > > logging_log_filetrans interface was used instead of the logging_log_file > > interface. Is this still the intention? > > > > Attached is a patch to add an interface to allow domains to read > > hald_log_t in case hald_log_t needs to remain a private type. > > The filetrans interface is needed so that when hal creates it's log > in /var/log, it gets the correct type. It should also have the log_file > interface too, since its a log file. I changed hald_log_t to be a log > file. If hald_log_t is a log file, then I no longer need my proposed hal_read_log interface. If anyone else desires that interface let me know and I would be glad to clean up the patch and resubmit. Thanks, rob. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.