Re: semodule patch to use new semanage interfaces

[Daniel J Walsh <dwalsh@redhat.com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Joshua Brindle wrote:
> Daniel J Walsh wrote:
> Allows semodule to read bzip compressed policy packages directly.

> I'm finally looking at these (sorry it took so long)..

> I thought one part of it was suppose to make hard links to files if you
> install but after merging this patch and the compression support I try
> semodule -i /usr/share/selinux/targeted/somepolicy.pp.bz2 (I'm on F10
> and they are already bzip'd) and instead of making a hard link to the
> bz2 it looks like it writes the uncompressed file to
> /etc/selinux/targeted/modules/active/modules. Am I misunderstanding the
> intention of these patches?

Originally this was the intention but it was wrong.  The problem is the
file context would start to get screwed up every where and we end up
with the /etc/selinux/targeted/modules/active/ directory looking like a
patchwork of labels.

So the patch makes a compressed copy whether or not the file is
originally compressed in the new location.

It does use the hard links for creating the snapshot directory though.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkliZoEACgkQrlYvE4MpobMAQgCfdlq4J4KO0/wejYLYkVUhdf4K
Yn8An25Mf2zzbcIbNRUDOw09iutxfFyi
=ruHv
-----END PGP SIGNATURE-----

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.