Re: Adding local nodecon's through semanage

[Paul Moore <paul.moore@hp.com>]

On Thursday 03 July 2008 12:16:27 pm Stephen Smalley wrote:
> On Thu, 2008-07-03 at 10:32 -0400, Paul Moore wrote:
> > On Thursday 03 July 2008 9:47:58 am Christian Kuester wrote:
> > > Hi List,
> > >
> > > I had a small conversation with Stephen Smalley on the
> > > fedora-selinux-list about an easy way to add
> > > (local) nodecon's on a SELinux enabled system. As this is not
> > > implemented in semanage yet
> > > he gave me the advice to revive a discussion[1] on this list from
> > > 2006. It began because a patch against
> > > semanage was posted which enabled nodecon support. It seems that
> > > the patch never got commited
> > > because it didn't work as expected.
> >
> > Hello,
> >
> > I think the idea of adding network node support to semanage is a
> > good one.  Unfortunately I have no experience with python or
> > semanage so I'm probably not the best person to provide coding
> > advice or help.
> >
> > Who does look after semanage these days?
>
> Yes, I agree that we ought to support this functionality, especially
> as libsemanage already provides the interfaces even if there are
> lingering issues in the implementation.
>
> Joshua can likely help with the libsemanage/libsepol side and Dan
> with the semanage front end side.

Great, I'll try to help out as much as I can - this could be motivation 
to try and learn some python.

> Christian - do you have a re-based copy of the patch against the svn
> trunk that you were testing with?

Christian, if you do have an updated/re-based patch, would you mind 
posting it?

-- 
paul moore
linux @ hp

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.