Re: [PATCH] libsetrans

[Daniel J Walsh <dwalsh@redhat.com>]

Chad Hanson wrote:
> The following proposed patch to libsetrans incorporates the following
> changes:
>
> - Make libsetrans generic by creating a setrans config file
> - Add translation config file for MLS policy
> - Fix to handle translation for same level range string without separate
> definition (e.g. SystemHigh-SystemHigh)
> - move libsetrans disable option from translation config file
> (mcs.conf/mls.conf) to setrans config file
> - Some comment updates for mcs.conf
>
> -Chad
>
>   
How about instead of adding another config file, we default the file to 
the current policy that is installed.

/etc/selinux/setrans_mls.conf and /etc/selinux/setrans_targeted.conf

libselinux already reads config file so this will require no additional 
perms, or we just put them into the policy file.

/etc/selinux/TYPE/setrans.conf

-- 



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.