On Tue, 2010-04-13 at 08:29 -0400, Christopher J. PeBenito wrote: > On Mon, 2010-04-12 at 19:19 -0400, Eric Paris wrote: > > kernel can dynamically remap perms. Drop the open lookup table and put open > > in the common file perms. > > So I need to move open into the common perms in the policy? Thats going > to be a nasty compatibility problem for older systems. No, you don't have to change anything in the policy - that's the point of the dynamic class/perm discovery support in the kernel. The kernel will map its notion of open permission to the policy values at policy load time and will then map access vectors accordingly. -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
