On Wednesday 14 January 2009 12:24:41 pm Stephen Smalley wrote: > On Wed, 2009-01-14 at 12:05 -0500, Paul Moore wrote: > > On Wednesday 14 January 2009 11:15:46 am Justin P. Mattock wrote: > > > Paul Moore wrote: > > > > On Wednesday 14 January 2009 12:18:18 am Justin P. Mattock wrote: > > > >> When using netlabelctl on a dell laptop > > > >> I'm able to define the addresses that I want: > > > >> > > > >> netlabelctl unlbl add interface:wlan0 address:<radiostation> > > > >> label:system_u:object_r:netlabel_peer_t:s0 > > > >> netlabelctl unlbl add interface:wlan0 address:<myaddress> > > > >> label:system_u:object_r:netlabel_peer_t:s0 > > > >> netlabelctl -p unlbl accept off > > > >> > > > >> {the above was from http://paulmoore.livejournal.com/1758.html > > > >> }; > > > > ... > > > > > >> (I'm able to listen to the radio station allowed, then if I > > > >> choose another station; if I haven't defined an address like > > > >> the above, mplayer just sits there.denying the unlabeled > > > >> packet. that is until I allow the address); > > > >> The problem I have is when I do the same on my macbook pro ati > > > >> chipset. with the ath9k module, I'm able to listen to any > > > >> station, search the web etc.. > > > >> it seems netlabelctl -p unlbl accept off makes no difference > > > >> if it's on or off. > > > >> > > > >> Is this built into ath9k yet, or is there something I'm > > > >> missing? > > > > > > > > That is just plain odd, there isn't really anything that is > > > > driver specific. Can you share any more details like kernel > > > > version, netlabel_tools verion, distro, etc? I don't have any > > > > ath9k hardware lying around to test so I would appreciate > > > > whatever additional information you can provide. > > > > > > Hey alright.(I finally got around to trying netlabelctl out!). > > > > It's pretty cool. In newer versions of netlabelctl I added an > > undocumented option to actually allow it to fix a sandwhich and do > > the dishes afterwards. The exact command line option needed is > > left as an exercise for the reader :) > > I hope it doesn't run afoul of this patent: > http://www.wipo.int/pctdb/en/wo.jsp?IA=US2005044838&WO=2006068865&DIS >PLAY=STATUS Sigh. I fear that it may, guess I'll have to pull feature from the next release :( What am I going to do for lunch now! -- paul moore linux @ hp -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.