Re: RFC: https://github.com/SELinuxProject/selinux/issues/140#issuecomment-556049712

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Nov 20, 2019 at 05:08:58PM +0100, Dominick Grift wrote:
> I was reminded of issue in topic.

I think that, if anything, I should limit my effort to just renaming the userprefix statement in CIL.

It would be up to any users of -P/--prefix in semanage to address that challenge.
As there currently aren't any such users, I believe that the way this is currently handled in semanage is probably the right way (not exposing -P/--prefix)

> 
> "userprefix" functionality has been removed from reference policy since 2008, in favor of "rbacsep role".
> 
> I am currently the only (known) user of "rbacsep role".
> 
> I guess the CIL "userprefix" statement would probably have to be renamed to something like "rbacsep_role", and the -P/--prefix to something more accurate (any naming suggestions?)
> 
> Am I overlooking some other visible/exposed references to this deprecated "userprefix" functionality?
> 
> As the only user of this functionality (although I am not a user of semanage) I feel obliged to some how try to address this.
> 
> -- 
> Key fingerprint = 5F4D 3CDB D3F8 3652 FBD8 02D5 3B6C 5F1D 2C7B 6B02
> https://sks-keyservers.net/pks/lookup?op=get&search=0x3B6C5F1D2C7B6B02
> Dominick Grift



-- 
Key fingerprint = 5F4D 3CDB D3F8 3652 FBD8 02D5 3B6C 5F1D 2C7B 6B02
https://sks-keyservers.net/pks/lookup?op=get&search=0x3B6C5F1D2C7B6B02
Dominick Grift

Attachment: signature.asc
Description: PGP signature


[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux