On Mon, Jun 29, 2015 at 09:29:34AM +0200, Miroslav Grepl wrote: > Trying to make sandbox working using CIL but I see it does not support > typeinherit statement. One of those features that really define CIL but that is currently not available or fully working yet. My suggestion is to study the "cilpolicy" (which is really just a snapshot of reference policy transformed to cil with hll i believe) This will give you some pointers as to how to create an alternative implementation that achieves a similar result. When you write CIL policy, there are some "bugs" to take into account and to workaround. > > -- > Miroslav Grepl > Senior Software Engineer, SELinux Solutions > Red Hat, Inc. > _______________________________________________ > Selinux mailing list > Selinux@xxxxxxxxxxxxx > To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. > To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx. -- 02DFF788 4D30 903A 1CF3 B756 FB48 1514 3148 83A2 02DF F788 http://keys.gnupg.net/pks/lookup?op=vindex&search=0x314883A202DFF788 Dominick Grift
Attachment:
pgp6CgMlLSBzn.pgp
Description: PGP signature
_______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
