Re: What's a policy configuration file?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 05/01/14 23:15, Stephen Smalley wrote:
First reference is talking about source configuration files, and the
next section of that report describes how policy.conf is created and
then compiled into the binary policy file.
Second reference is talking about the configuration files installed on
the system for use at runtime, which includes both the kernel binary
policy file and various text configuration files used by userspace
programs.  The term could apply to either.

On Thu, May 1, 2014 at 10:28 AM, dE <de.techno@xxxxxxxxx> wrote:
On 05/01/14 22:41, Stephen Smalley wrote:
Typically, but you didn't provide any context or cite the source of
the reference.
One might use the term for an individual source file, the policy.conf
file generated from all of the source files, or the final kernel
binary policy file, although the latter is less likely.

On Thu, May 1, 2014 at 9:55 AM, dE <de.techno@xxxxxxxxx> wrote:
Is this another name for policy source?
_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to
Selinux-request@xxxxxxxxxxxxx.

http://www.nsa.gov/research/_files/selinux/papers/policy2/x109.shtml

http://selinuxproject.org/page/ConfigurationFiles#Policy_Configuration_Files

I would like to know what the official website means -- it's definitely the
sources. I hope I'll read about policy.conf in the NSA reference.

_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to
Selinux-request@xxxxxxxxxxxxx.

The policy.conf is used during build time to make small time changes in the resulting binary right?
_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.




[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux