All of lore.kernel.org
 help / color / mirror / Atom feed
* netlabel can be run in init scripts I think?
@ 2007-03-23 19:30 Daniel J Walsh
  2007-03-23 20:23 ` Paul Moore
  0 siblings, 1 reply; 3+ messages in thread
From: Daniel J Walsh @ 2007-03-23 19:30 UTC (permalink / raw)
  To: Christopher J. PeBenito, SE Linux

[-- Attachment #1: Type: text/plain, Size: 51 bytes --]

I believe this patch came from netlabel guys.

Dan

[-- Attachment #2: netlabel.patch --]
[-- Type: text/x-patch, Size: 443 bytes --]

--- nsaserefpolicy/policy/modules/system/netlabel.te	2006-11-16 17:15:24.000000000 -0500
+++ serefpolicy-2.5.10/policy/modules/system/netlabel.te	2007-03-22 15:06:59.000000000 -0400
@@ -8,8 +8,7 @@
 
 type netlabel_mgmt_t;
 type netlabel_mgmt_exec_t;
-domain_type(netlabel_mgmt_t)
-domain_entry_file(netlabel_mgmt_t,netlabel_mgmt_exec_t)
+init_daemon_domain(netlabel_mgmt_t,netlabel_mgmt_exec_t)
 
 ########################################
 #

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: netlabel can be run in init scripts I think?
  2007-03-23 19:30 netlabel can be run in init scripts I think? Daniel J Walsh
@ 2007-03-23 20:23 ` Paul Moore
  2007-03-23 21:46   ` Christopher J. PeBenito
  0 siblings, 1 reply; 3+ messages in thread
From: Paul Moore @ 2007-03-23 20:23 UTC (permalink / raw)
  To: Daniel J Walsh; +Cc: Christopher J. PeBenito, SE Linux

On Friday, March 23 2007 3:30:11 pm Daniel J Walsh wrote:
> I believe this patch came from netlabel guys.

Yes it did, I believe it was posted to this list too, although I could be 
mistaken.  That being said, I wonder if instead of init_daemon_domain() 
init_system_domain() should be used - thoughts?

-- 
paul moore
linux security @ hp

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: netlabel can be run in init scripts I think?
  2007-03-23 20:23 ` Paul Moore
@ 2007-03-23 21:46   ` Christopher J. PeBenito
  0 siblings, 0 replies; 3+ messages in thread
From: Christopher J. PeBenito @ 2007-03-23 21:46 UTC (permalink / raw)
  To: Paul Moore; +Cc: Daniel J Walsh, SE Linux

On Fri, 2007-03-23 at 16:23 -0400, Paul Moore wrote:
> On Friday, March 23 2007 3:30:11 pm Daniel J Walsh wrote:
> > I believe this patch came from netlabel guys.
> 
> Yes it did, I believe it was posted to this list too, although I could be 
> mistaken.

Yes you sent it on March 9th; its still in my patch queue.

> That being said, I wonder if instead of init_daemon_domain() 
> init_system_domain() should be used - thoughts?

If this is actually a daemon, then the former init_daemon_domain() be
used, otherwise init_system_domain() should be used.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2007-03-23 21:45 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2007-03-23 19:30 netlabel can be run in init scripts I think? Daniel J Walsh
2007-03-23 20:23 ` Paul Moore
2007-03-23 21:46   ` Christopher J. PeBenito

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.