Hi,
I am running into an issue with sepolgen on Debian. Debian ships
more than one version of the refpolicy, a default one, and a
MLS enabled one. So, the include files live in either
/usr/share/selinux/{default,mls}/include
sepolgen (in src/sepolgen/defaults.py) sets refpolicy_devel() to
a single location -- and thus, only one version of the security policy
may be supported. So, sepolgen-ifgen from policycoreutils can only work
with one policy, which may not be the one installed on the target
machine. Could this be made configurable, somehow? As far as I can
see, sepolgen's python library does not offer any way to set the value.
It would be nice if the location of the include directory could
be looked for from a PATH like variable setting, to make it easier for
distributions to ship more than one policy, or for end users to
experiment with other policies without have to overwrite the single
default.
manoj
--
Manoj Srivastava <srivasta@xxxxxxx> <http://www.golden-gryphon.com/>
1024D/BF24424C print 4966 F272 D093 B493 410B 924B 21BA DABB BF24 424C
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
