Re: selinux-policy-default

[Daniel J Walsh <dwalsh@redhat.com>]

Russell Coker wrote:

>On Fri, 6 Feb 2004 16:57, Eric Estabrooks <eric@urbanrage.com> wrote:
>  
>
>>/usr/bin/checkpolicy:  loading policy configuration from
>>/etc/security/selinux/src/policy.conf
>>domains/admin.te:32:ERROR 'unknown type sysadm_locate_t' at token ';' on
>>line 5974:
>>allow sysadm_locate_t { sysadm_mozilla_ro_t sysadm_mozilla_rw_t }:dir {
>>getattr
>>search };
>>    
>>
>
>I'll upload a new policy package to fix that tomorrow.
>
>Anyway using the locate policy for Debian is not a good idea.  Debian does not 
>have a SE Linux patched locate and is not likely to have one in the 
>forseeable future.  I think that locate is simply a bad idea and have no 
>plans to support it in Debian.
>
>  
>
>>I searched for type lines for sysadm_locate_t but couldn't find any in
>>    
>>
>
>Look at macros/program/locate_macros.te .
>
>  
>

Easiest thing to do is remove slocate.te from domain/program and  then 
do a make reload.

Dan

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.