On Fri, 2008-09-19 at 21:15 +1000, Russell Coker wrote: > I have a policy problem that only seems to occur in a particular modular > configuration. It ends up with attribute A being allowed access to attribute > B which grants something I don't desire. > > How can I determine what the attribute names are with apol? When I use the > policy.23 file the relevant data is gone. Can I give it a base.pp and a set > of modules and have it do the link itself? If so how? apol /etc/selinux/targeted/modules/active/base.pp /etc/selinux/targeted/modules/active/modules/*.pp works for me. -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
