Re: default policy package

[Dale Amon <amon@vnl.com>]

On Tue, Nov 04, 2003 at 01:15:57AM +1100, Russell Coker wrote:
> > ERROR: unknown type sysadm_xserver_t' at token ':' on line 7525:
> > allow sysadm_xserver_t xserver_tmpfile:dir { read getattr lock search ioctl
> > add name remove_name write };
> 
> The policy needs some work in that area.
> 
> The root cause is that you included startx.te without xserver.te.  If you add 
> xserver.te or remove startx.te then it should compile.

Actually, the root case is the package script. It
runs through a list of domain/programs but doesn't
know to remove misc/startx.te. Going from that
to manually fiddling left me with a 'priming effect'.
I never even thought to look in misc.

Here's one that might interest Steve: load_policy can 
totally lock up a small memory machine if the binary 
policy is large.

-- 
------------------------------------------------------
       IN MY NAME:            Dale Amon, CEO/MD
  No Mushroom clouds over     Islandone Society
    London and New York.      www.islandone.org
------------------------------------------------------

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.