From mboxrd@z Thu Jan 1 00:00:00 1970 Message-ID: <46C4A5DA.7030709@manicmethod.com> Date: Thu, 16 Aug 2007 15:30:34 -0400 From: Joshua Brindle MIME-Version: 1.0 To: Stephen Smalley CC: James Morris , Eric Paris , selinux@tycho.nsa.gov, dwalsh@redhat.com Subject: Re: [PATCH] selinuxfs to globally disable dontaudit rules References: <1186696737.20393.10.camel@localhost.localdomain> <46BBAE00.7050600@manicmethod.com> <46BBBDDF.2000307@manicmethod.com> <1187285317.909.36.camel@moss-spartans.epoch.ncsc.mil> <46C48D2B.3010504@manicmethod.com> <1187286476.909.51.camel@moss-spartans.epoch.ncsc.mil> <46C48F01.40101@manicmethod.com> <1187287475.909.69.camel@moss-spartans.epoch.ncsc.mil> <1187291884.909.103.camel@moss-spartans.epoch.ncsc.mil> In-Reply-To: <1187291884.909.103.camel@moss-spartans.epoch.ncsc.mil> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov Stephen Smalley wrote: >> Some of Dan's policycoreutils patches are trivial or simple bug fixes. >> Others are less clear to me. >> >> I was going to test the libsemanage genhomedircon patches, but haven't >> done so yet. I don't have a problem with them conceptually. Have you >> verified that they yield no change in output under -targeted and -strict >> policy? And run them under valgrind? >> > > Oh, and what to do about the fact that it won't build anywhere but > rawhide (ustr dependency)? > > We can pull the parts of ustr we need into the library, it is designed to do used that way. This is also trunk though, and we don't guarantee ABI stability in trunk right? The sepolgen dependency of python 2.5 causes similar problems AFAIK. >> Eric's handle unknown patches are still outstanding. Dan, if we merged >> that support, would you use it in building future policies? >> >> Karl's sepolgen bug fix looks fine to merge. >> >> I (or someone) have to rework libsepol in stable and trunk to avoid >> unaligned accesses (as per the wrong magic number thread). Already did >> it once for the kernel. Sigh. >> >> -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.