Re: [PATCH] Support for ocontexts per device.

[Stephen Smalley <sds@tycho.nsa.gov>]

On Thu, 2012-07-12 at 10:08 -0400, Stephen Smalley wrote:
> On Wed, 2012-07-11 at 16:46 -0700, William Roberts wrote:
> > ocontexts was split up into 4 files:
> > 1.fs_use
> > 2.genfs_contexts
> > 3.initial_sid_contexts
> > 4.port_contexts
> > 
> > Each file has their respective declerations in them.
> > Devices, in their respective device directory, can now specify sepolicy.fs_use, sepolicy.genfs_contexts, sepolicy.port_contexts, and sepolicy.initial_sid_contexts. These declerations will be added right behind their respective sepolicy counterparts in the concatenated configuration file.
> 
> Thanks, applied.  Conflicted with hqjiang's patch but I resolved by
> dropping his addition to ocontexts.  You can restore them now by
> creating a sepolicy.genfs_contexts file in device/samsung/tuna and a
> trivial one in the device/samsung/maguro,toro directories that include
> the tuna file as with the sepolicy.fc files.

Hmm...spoke too soon.  Something is wrong with the resulting policy;
won't load into the kernel.

-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.