Re: [PATCH] selinuxfs to globally disable dontaudit rules

[Joshua Brindle <method@manicmethod.com>]

Stephen Smalley wrote:
>> Some of Dan's policycoreutils patches are trivial or simple bug fixes.
>> Others are less clear to me.
>>
>> I was going to test the libsemanage genhomedircon patches, but haven't
>> done so yet.  I don't have a problem with them conceptually.  Have you
>> verified that they yield no change in output under -targeted and -strict
>> policy?  And run them under valgrind?
>>     
>
> Oh, and what to do about the fact that it won't build anywhere but
> rawhide (ustr dependency)?
>
>   
We can pull the parts of ustr we need into the library, it is designed 
to do used that way. This is also trunk though, and we don't guarantee 
ABI stability in trunk right? The sepolgen dependency of python 2.5 
causes similar problems AFAIK.

>> Eric's handle unknown patches are still outstanding.  Dan, if we merged
>> that support, would you use it in building future policies?
>>
>> Karl's sepolgen bug fix looks fine to merge.
>>
>> I (or someone) have to rework libsepol in stable and trunk to avoid
>> unaligned accesses (as per the wrong magic number thread).  Already did
>> it once for the kernel.  Sigh.
>>
>>     



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.