Stephen Smalley wrote: > On Fri, 2008-09-19 at 21:15 +1000, Russell Coker wrote: >> I have a policy problem that only seems to occur in a particular modular >> configuration. It ends up with attribute A being allowed access to attribute >> B which grants something I don't desire. >> >> How can I determine what the attribute names are with apol? When I use the >> policy.23 file the relevant data is gone. Can I give it a base.pp and a set >> of modules and have it do the link itself? If so how? > > apol /etc/selinux/targeted/modules/active/base.pp /etc/selinux/targeted/modules/active/modules/*.pp > > works for me. > Or in the gui when you load a policy there are monolithic and modular options, modular lets you specify a base and a set of modules. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
