From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from jazzhorn.ncsc.mil (mummy.ncsc.mil [144.51.88.129]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with ESMTP id l1QF8InY006420 for ; Mon, 26 Feb 2007 10:08:18 -0500 Received: from exchange.columbia.tresys.com (jazzhorn.ncsc.mil [144.51.5.9]) by jazzhorn.ncsc.mil (8.12.10/8.12.10) with SMTP id l1QF9eG2014540 for ; Mon, 26 Feb 2007 15:09:40 GMT Subject: Re: Is the usercanread attribute still needed? From: "Christopher J. PeBenito" To: Ryan Bradetich Cc: selinux@tycho.nsa.gov In-Reply-To: References: <1172004294.20576.236.camel@sgc.columbia.tresys.com> <1172248387.15371.66.camel@sgc.columbia.tresys.com> Content-Type: text/plain Date: Mon, 26 Feb 2007 10:09:36 -0500 Message-Id: <1172502576.19655.11.camel@sgc> Mime-Version: 1.0 Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov On Sat, 2007-02-24 at 08:02 -0800, Ryan Bradetich wrote: > I thought I did forward the patch, but it looks like the foward > stripped the patch :( > Here is the patch again. Merged. > On 2/23/07, Christopher J. PeBenito wrote: > > > On 2/20/07, Ryan Bradetich wrote: > > > > Hello Chris, > > > > > > > > Thanks much for your reply! > > > > I have attached an updated patch that leaves the attribute definition > > > > in the files.te file. > > > > > > > > Just out of curiosity, what is the policy for obsoleting these attributes? > > > > At next policy file rev? > > > > It has to stay around for "a reasonable transition time". Since this is > > a fairly widely used interface, it'll probably have to stay for a few > > releases. > > > > Please resend the patch to the list. > > > > > > On 2/20/07, Christopher J. PeBenito wrote: > > > > > Since modules are statically compiled, we can't completely remove the > > > > > attribute yet, otherwise it might cause some policies to fail to link if > > > > > it is still required. However, the typeattribute could be removed from > > > > > files_config_file(). > > > > -- > > Chris PeBenito > > Tresys Technology, LLC > > (410) 290-1411 x150 > > > > -- Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.