Specify default type for a role

Specify default type for a role

[Michael C Thompson]

Hey all,

So I did some looking and asking around, and I was informed that there 
is no way to specify the default type for a role in the policy (so that 
you don't have to manually change the default_type file).

If this is indeed the case, this seems like a prime area for SELinux 
policy tool enhancement (and probably the policy language itself needs 
an update?).

What do people think of this idea, to specify the default type 
associated with a role via the policy?

Thanks,
Mike


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Specify default type for a role

[Joshua Brindle]

Michael C Thompson wrote:
> Hey all,
>
> So I did some looking and asking around, and I was informed that there 
> is no way to specify the default type for a role in the policy (so 
> that you don't have to manually change the default_type file).
>
> If this is indeed the case, this seems like a prime area for SELinux 
> policy tool enhancement (and probably the policy language itself needs 
> an update?).
>
> What do people think of this idea, to specify the default type 
> associated with a role via the policy?
One could add this functionality to libsemanage if desired to make it 
manageable via semanage or any other clients in the works. If you do 
beware of snakes in the code though...


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.