Re: [patch] Re: problem with "-" in libraries

[Debian User <rogelio@evoworks.evoserve.com>]

Stephen Smalley wrote:

>On Sat, 6 Jul 2002, Debian User wrote:
>
>  
>
>>Im developing a policy for a cramfs based selinux system. I cant specify the
>>contexts for libraries with a "-" in the names like "libpthread-0.9.11.so".
>>Checkpolicy does not accept such names int genfs_contexts. I am trying to work
>>around this by recompiling everything using modified library names. Can the
>>checkpolicy compiler be modified to accept this names?
>>    
>>
>
>The attached patch fixes the checkpolicy scanner to accept "-" in path
>tokens.  This patch has also been committed to the sourceforge CVS tree.
>  
>
Will apply thanks. I discovered that genfs_context  are used as 
prefixes. My policy worked somewhat by specifying only the names before 
the dash. I was able to make my system work but this is much better.

>--
>Stephen D. Smalley, NAI Labs
>ssmalley@nai.com
>
>
>  
>
>------------------------------------------------------------------------
>
>Index: module/checkpolicy/policy_scan.l
>===================================================================
>RCS file: /cvsroot/selinux/nsa/selinux/module/checkpolicy/policy_scan.l,v
>retrieving revision 1.5
>diff -u -r1.5 policy_scan.l
>--- module/checkpolicy/policy_scan.l	3 Jul 2002 20:39:47 -0000	1.5
>+++ module/checkpolicy/policy_scan.l	8 Jul 2002 12:17:16 -0000
>@@ -130,7 +130,7 @@
> T1				{ return(T1); }
> t2 |
> T2				{ return(T2); }
>-"/"({letter}|{digit}|_|"."|"/")*	{ return(PATH); }
>+"/"({letter}|{digit}|_|"."|"-"|"/")*	{ return(PATH); }
> {letter}({letter}|{digit}|_)*	{ return(IDENTIFIER); }
> {digit}{digit}*                 { return(NUMBER); }
> #[^\n]*                         { /* delete comments */ }
>  
>




--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.