Re: genhomedircon USERID and USERNAME patches

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 04/13/2016 07:18 PM, Dominick Grift wrote:

>> Let me correct that:
> 
>> "Even CIL-based modules can be installed via semodule and
>> managed via libsemanage, and libsemanage already contains a C 
>> implementation of genhomedircon."
> 
> 
>> that is not my point though. My point is: since we need a working
>>  genhomedircon for monolithic policy, we might cease the
>> opportunity to also support text-based module policy which can be
>> installed via semodule and managed via libsemanage, but does not
>> strictly require that .
> 
> 
> Make that "seize" instead (i think)
> 

I just realized that i do not have to bring CIL into the equation
here. We can keep it nice, simple and to the point. Refpolicy
genhomedircon needs to be updated (and needs just a general review to
make it work again on modern distributions) as well to make this new
functionality also work with monolithic policy.

Also since were on the discussion of genhomedircon, I might be wrong
here, but I believe genhomedircon cannot currently deal with %group
entries in seusers.

- -- 
Key fingerprint = 5F4D 3CDB D3F8 3652 FBD8  02D5 3B6C 5F1D 2C7B 6B02
https://sks-keyservers.net/pks/lookup?op=get&search=0x3B6C5F1D2C7B6B02
Dominick Grift
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=nbjE
-----END PGP SIGNATURE-----
_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.



[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux