On 05/10/2016 07:04 PM, Nicolas Iooss wrote: > On 05/10/2016 09:39 AM, Petr Lautrbach wrote: >> The man page's example suggested to use -g instead of -E >> >> Signed-off-by: Petr Lautrbach <plautrba@xxxxxxxxxx> >> --- >> policycoreutils/semodule/semodule.8 | 2 +- >> 1 file changed, 1 insertion(+), 1 deletion(-) >> >> diff --git a/policycoreutils/semodule/semodule.8 b/policycoreutils/semodule/semodule.8 >> index 6db390c..e5b54b3 100644 >> --- a/policycoreutils/semodule/semodule.8 >> +++ b/policycoreutils/semodule/semodule.8 >> @@ -121,7 +121,7 @@ $ semodule \-B \-p "/tmp" >> $ semodule \-B \-S "/tmp/var/lib/selinux" >> # Write the HLL version of puppet and the CIL version of wireshark >> # modules at priority 400 to the current working directory >> -$ semodule \-X 400 \-g wireshark \-\-cil \-g puppet \-\-hll >> +$ semodule \-X 400 \-E wireshark \-\-cil \-E puppet \-\-hll > > Actually this command extracts the HLL version of wireshark and the CIL > version of puppet (it creates wireshark.pp and puppet.cil on my system > with checkpolicy 2.5). In order to do what the comment suggests, the > --cil and --hll flags need to be set before the -E options: semodule -X > 400 --cil -E wireshark --hll -E puppet. > > -- Nicolas > I overlooked that. Thanks. I'll prepare another patch. Petr -- Petr Lautrbach
Attachment:
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
