Re: [PATCH external/sepolicy] Add iptables script to policy

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 2012-06-18 at 11:25 -0400, Paul Moore wrote:
> On Saturday, June 16, 2012 02:56:34 PM Joshua Brindle wrote:
> > diff --git a/iptables-selinux.sh b/iptables-selinux.sh
> > new file mode 100755
> > index 0000000..e9ac7d1
> > --- /dev/null
> > +++ b/iptables-selinux.sh
> > @@ -0,0 +1,18 @@
> > +#!/system/bin/sh
> > +
> > +IPTABLES="/system/bin/iptables"
> > +
> > +#$IPTABLES -t mangle -A INPUT -i wlan0 -j SECMARK --selctx ...
> 
> Perhaps we should use the security table instead of the mangle table?

Yes, assuming that it is supported by the Android iptables.

-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.


[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux