Re: [PATCH] policycoreutils semanage for nodes

[Karl MacMillan <kmacmillan@mentalrootkit.com>]

On Fri, 2006-09-08 at 09:54 -0400, Joshua Brindle wrote:
> Rodrigo Vivi wrote:
> > Hi all,
> >
> > Since libsemanage support node context management and semanage command for 
> > policycoreutils does not, I thought that was a good idea to implement this.
> >
> > This patch provide all that semanage command needs to manage nodes context.
> > (including a man page updated)
> >
> > However I know that SECMARK mechanism largely obsoletes the use of
> > netif and node contexts going forward, but I did this patch because I was 
> > missing the node management at semanage command.
> >
> > Thanks,
> > Rodrigo Vivi.
> > (vivijim at #selinux)
> >   
> >   
> In addition to the comments below, I tried this patch out and while it 
> indeed added the nodecon it didn't seem to have a net effect on the 
> system. This is probably because of ordering issues which IIRC is why we 
> never had this support to begin with.
> 

How is this different from the port sorting problem? For a simple
example pre-pending the local modifications should have the desired
effect, so this sounds like a general semanage bug to me.

Karl


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.