* [PATCH] Debian refpolicy-trunk xen
@ 2007-12-08 15:15 Litwiniec Robert
2007-12-11 20:52 ` Christopher J. PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Litwiniec Robert @ 2007-12-08 15:15 UTC (permalink / raw)
To: SELinux list
Hello, patch for xen:
--- refpolicy.orig/policy/modules/system/xen.fc 2007-10-02 20:17:33.000000000 +0200
+++ refpolicy/policy/modules/system/xen.fc 2007-11-17 16:39:12.755643344 +0100
@@ -24,3 +24,10 @@
/var/run/xenstored(/.*)? gen_context(system_u:object_r:xenstored_var_run_t,s0)
/xen(/.*)? gen_context(system_u:object_r:xen_image_t,s0)
+
+ifdef(`distro_debian',`
+/usr/lib/xen-(.*)?/bin/xenstored -- gen_context(system_u:object_r:xenstored_exec_t,s0)
+/usr/lib/xen-(.*)?/bin/xend -- gen_context(system_u:object_r:xend_exec_t,s0)
+/usr/lib/xen-(.*)?/bin/xenconsoled -- gen_context(system_u:object_r:xenconsoled_exec_t,s0)
+/usr/lib/xen-(.*)?/bin/xm -- gen_context(system_u:object_r:xm_exec_t,s0)
+')
regards,
Robert Litwiniec
LiNiO
--
http://debian.wonder.pl - Debian/GNU Linux wiki
http://zamosc.wonder.pl - Wonders of Zamosc - Zamosc zadziwia
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [PATCH] Debian refpolicy-trunk xen
2007-12-08 15:15 [PATCH] Debian refpolicy-trunk xen Litwiniec Robert
@ 2007-12-11 20:52 ` Christopher J. PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2007-12-11 20:52 UTC (permalink / raw)
To: Litwiniec Robert; +Cc: SELinux list
On Sat, 2007-12-08 at 16:15 +0100, Litwiniec Robert wrote:
> Hello, patch for xen:
>
> --- refpolicy.orig/policy/modules/system/xen.fc 2007-10-02 20:17:33.000000000 +0200
> +++ refpolicy/policy/modules/system/xen.fc 2007-11-17 16:39:12.755643344 +0100
> @@ -24,3 +24,10 @@
> /var/run/xenstored(/.*)? gen_context(system_u:object_r:xenstored_var_run_t,s0)
>
> /xen(/.*)? gen_context(system_u:object_r:xen_image_t,s0)
> +
> +ifdef(`distro_debian',`
> +/usr/lib/xen-(.*)?/bin/xenstored -- gen_context(system_u:object_r:xenstored_exec_t,s0)
> +/usr/lib/xen-(.*)?/bin/xend -- gen_context(system_u:object_r:xend_exec_t,s0)
> +/usr/lib/xen-(.*)?/bin/xenconsoled -- gen_context(system_u:object_r:xenconsoled_exec_t,s0)
> +/usr/lib/xen-(.*)?/bin/xm -- gen_context(system_u:object_r:xm_exec_t,s0)
> +')
The regex is redundant. The * already makes it optional, so the ? isn't
needed, but I don't think we want it optional anyway. I'm guessing you
want to match /usr/lib/xen-[version number]/ ?
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2007-12-11 20:52 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2007-12-08 15:15 [PATCH] Debian refpolicy-trunk xen Litwiniec Robert
2007-12-11 20:52 ` Christopher J. PeBenito
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).