* [refpolicy] [PATCH 1/1] Remove the hard-coding of selinuxfs mountpoint
@ 2013-05-28 9:28 Qingtao Cao
2013-06-05 17:35 ` Christopher J. PeBenito
0 siblings, 1 reply; 6+ messages in thread
From: Qingtao Cao @ 2013-05-28 9:28 UTC (permalink / raw)
To: refpolicy
Remove the hard-coding of selinuxfs mountpoint in Rules.monolithic,
especially since it has been relocated to /sys/fs/.
Signed-off-by: Qingtao Cao <qingtao.cao.au@gmail.com>
---
Rules.monolithic | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/Rules.monolithic b/Rules.monolithic
index 7c4d035..acac675 100644
--- a/Rules.monolithic
+++ b/Rules.monolithic
@@ -5,7 +5,8 @@
# determine the policy version and current kernel version if possible
pv := $(shell $(CHECKPOLICY) -V |cut -f 1 -d ' ')
-kv := $(shell cat /selinux/policyvers)
+selinuxfs_mnt = $(shell mount | grep selinuxfs | cut -f 3 -d ' ')
+kv := $(shell cat $(selinuxfs_mnt)/policyvers)
# dont print version warnings if we are unable to determine
# the currently running kernel's policy version
--
1.8.1.4
^ permalink raw reply related [flat|nested] 6+ messages in thread
* [refpolicy] [PATCH 1/1] Remove the hard-coding of selinuxfs mountpoint
2013-05-28 9:28 [refpolicy] [PATCH 1/1] Remove the hard-coding of selinuxfs mountpoint Qingtao Cao
@ 2013-06-05 17:35 ` Christopher J. PeBenito
2013-06-06 4:29 ` Qingtao Cao
0 siblings, 1 reply; 6+ messages in thread
From: Christopher J. PeBenito @ 2013-06-05 17:35 UTC (permalink / raw)
To: refpolicy
On 05/28/13 05:28, Qingtao Cao wrote:
> Remove the hard-coding of selinuxfs mountpoint in Rules.monolithic,
> especially since it has been relocated to /sys/fs/.
>
> Signed-off-by: Qingtao Cao <qingtao.cao.au@gmail.com>
> ---
> Rules.monolithic | 3 ++-
> 1 file changed, 2 insertions(+), 1 deletion(-)
>
> diff --git a/Rules.monolithic b/Rules.monolithic
> index 7c4d035..acac675 100644
> --- a/Rules.monolithic
> +++ b/Rules.monolithic
> @@ -5,7 +5,8 @@
>
> # determine the policy version and current kernel version if possible
> pv := $(shell $(CHECKPOLICY) -V |cut -f 1 -d ' ')
> -kv := $(shell cat /selinux/policyvers)
> +selinuxfs_mnt = $(shell mount | grep selinuxfs | cut -f 3 -d ' ')
> +kv := $(shell cat $(selinuxfs_mnt)/policyvers)
>
> # dont print version warnings if we are unable to determine
> # the currently running kernel's policy version
I'd like to do something like this, but I don't think this way is the best, as Gentoo, for example, has two mounts of selinuxfs (in /sys/fs/ and / for compat). It seems like updating the selinuxconfig tool would be best, but Fedora doesn't include it. We might have to grep it from sestatus output. Or we could update the libselinux swig wrapper to export selinux_mnt, so we could use a python script to find the mount point.
--
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com
^ permalink raw reply [flat|nested] 6+ messages in thread
* [refpolicy] [PATCH 1/1] Remove the hard-coding of selinuxfs mountpoint
2013-06-05 17:35 ` Christopher J. PeBenito
@ 2013-06-06 4:29 ` Qingtao Cao
2013-06-06 13:29 ` Christopher J. PeBenito
0 siblings, 1 reply; 6+ messages in thread
From: Qingtao Cao @ 2013-06-06 4:29 UTC (permalink / raw)
To: refpolicy
Thanks Chris for your comments! Please check out the revised version that
uses sestatus.
Now that the "selinux_mnt" string is initialized by libselinux and sestatus
has printed it out anyway, it would be relatively easier to mainpulate
sestatus result than touching the libselinux swig wrapper and writing a
relevant python.
Thanks,
Harry
On Thu, Jun 6, 2013 at 1:35 AM, Christopher J. PeBenito <
cpebenito@tresys.com> wrote:
> On 05/28/13 05:28, Qingtao Cao wrote:
> > Remove the hard-coding of selinuxfs mountpoint in Rules.monolithic,
> > especially since it has been relocated to /sys/fs/.
> >
> > Signed-off-by: Qingtao Cao <qingtao.cao.au@gmail.com>
> > ---
> > Rules.monolithic | 3 ++-
> > 1 file changed, 2 insertions(+), 1 deletion(-)
> >
> > diff --git a/Rules.monolithic b/Rules.monolithic
> > index 7c4d035..acac675 100644
> > --- a/Rules.monolithic
> > +++ b/Rules.monolithic
> > @@ -5,7 +5,8 @@
> >
> > # determine the policy version and current kernel version if possible
> > pv := $(shell $(CHECKPOLICY) -V |cut -f 1 -d ' ')
> > -kv := $(shell cat /selinux/policyvers)
> > +selinuxfs_mnt = $(shell mount | grep selinuxfs | cut -f 3 -d ' ')
> > +kv := $(shell cat $(selinuxfs_mnt)/policyvers)
> >
> > # dont print version warnings if we are unable to determine
> > # the currently running kernel's policy version
>
> I'd like to do something like this, but I don't think this way is the
> best, as Gentoo, for example, has two mounts of selinuxfs (in /sys/fs/ and
> / for compat). It seems like updating the selinuxconfig tool would be
> best, but Fedora doesn't include it. We might have to grep it from
> sestatus output. Or we could update the libselinux swig wrapper to export
> selinux_mnt, so we could use a python script to find the mount point.
>
> --
> Chris PeBenito
> Tresys Technology, LLC
> www.tresys.com | oss.tresys.com
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://oss.tresys.com/pipermail/refpolicy/attachments/20130606/4e1c971f/attachment.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Remove-the-hard-coding-of-selinuxfs-mountpoint.patch
Type: application/octet-stream
Size: 1087 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20130606/4e1c971f/attachment.obj
^ permalink raw reply [flat|nested] 6+ messages in thread
* [refpolicy] [PATCH 1/1] Remove the hard-coding of selinuxfs mountpoint
2013-06-06 4:29 ` Qingtao Cao
@ 2013-06-06 13:29 ` Christopher J. PeBenito
2013-06-07 6:35 ` Qingtao Cao
0 siblings, 1 reply; 6+ messages in thread
From: Christopher J. PeBenito @ 2013-06-06 13:29 UTC (permalink / raw)
To: refpolicy
On 06/06/13 00:29, Qingtao Cao wrote:
> Thanks Chris for your comments! Please check out the revised version that uses sestatus.
>
> Now that the "selinux_mnt" string is initialized by libselinux and sestatus has printed it out anyway, it would be relatively easier to mainpulate sestatus result than touching the libselinux swig wrapper and writing a relevant python.
On second thought, since we only care about the selinuxfs location because we want the policy version, we can just use the python bindings to get the policy version and then not care about selinuxfs. I committed a patch that does this.
> On Thu, Jun 6, 2013 at 1:35 AM, Christopher J. PeBenito <cpebenito at tresys.com <mailto:cpebenito@tresys.com>> wrote:
>
> On 05/28/13 05:28, Qingtao Cao wrote:
> > Remove the hard-coding of selinuxfs mountpoint in Rules.monolithic,
> > especially since it has been relocated to /sys/fs/.
> >
> > Signed-off-by: Qingtao Cao <qingtao.cao.au at gmail.com <mailto:qingtao.cao.au@gmail.com>>
> > ---
> > Rules.monolithic | 3 ++-
> > 1 file changed, 2 insertions(+), 1 deletion(-)
> >
> > diff --git a/Rules.monolithic b/Rules.monolithic
> > index 7c4d035..acac675 100644
> > --- a/Rules.monolithic
> > +++ b/Rules.monolithic
> > @@ -5,7 +5,8 @@
> >
> > # determine the policy version and current kernel version if possible
> > pv := $(shell $(CHECKPOLICY) -V |cut -f 1 -d ' ')
> > -kv := $(shell cat /selinux/policyvers)
> > +selinuxfs_mnt = $(shell mount | grep selinuxfs | cut -f 3 -d ' ')
> > +kv := $(shell cat $(selinuxfs_mnt)/policyvers)
> >
> > # dont print version warnings if we are unable to determine
> > # the currently running kernel's policy version
>
> I'd like to do something like this, but I don't think this way is the best, as Gentoo, for example, has two mounts of selinuxfs (in /sys/fs/ and / for compat). It seems like updating the selinuxconfig tool would be best, but Fedora doesn't include it. We might have to grep it from sestatus output. Or we could update the libselinux swig wrapper to export selinux_mnt, so we could use a python script to find the mount point.
>
> --
> Chris PeBenito
> Tresys Technology, LLC
> www.tresys.com <http://www.tresys.com> | oss.tresys.com <http://oss.tresys.com>
>
>
--
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com
^ permalink raw reply [flat|nested] 6+ messages in thread
* [refpolicy] [PATCH 1/1] Remove the hard-coding of selinuxfs mountpoint
2013-06-06 13:29 ` Christopher J. PeBenito
@ 2013-06-07 6:35 ` Qingtao Cao
0 siblings, 0 replies; 6+ messages in thread
From: Qingtao Cao @ 2013-06-07 6:35 UTC (permalink / raw)
To: refpolicy
Thanks Chris! Your commit sure looks much elegant than mine :-)
Cheers,
Harry
On Thu, Jun 6, 2013 at 9:29 PM, Christopher J. PeBenito <
cpebenito@tresys.com> wrote:
> On 06/06/13 00:29, Qingtao Cao wrote:
> > Thanks Chris for your comments! Please check out the revised version
> that uses sestatus.
> >
> > Now that the "selinux_mnt" string is initialized by libselinux and
> sestatus has printed it out anyway, it would be relatively easier to
> mainpulate sestatus result than touching the libselinux swig wrapper and
> writing a relevant python.
>
> On second thought, since we only care about the selinuxfs location because
> we want the policy version, we can just use the python bindings to get the
> policy version and then not care about selinuxfs. I committed a patch that
> does this.
>
>
> > On Thu, Jun 6, 2013 at 1:35 AM, Christopher J. PeBenito <
> cpebenito at tresys.com <mailto:cpebenito@tresys.com>> wrote:
> >
> > On 05/28/13 05:28, Qingtao Cao wrote:
> > > Remove the hard-coding of selinuxfs mountpoint in Rules.monolithic,
> > > especially since it has been relocated to /sys/fs/.
> > >
> > > Signed-off-by: Qingtao Cao <qingtao.cao.au@gmail.com <mailto:
> qingtao.cao.au at gmail.com>>
> > > ---
> > > Rules.monolithic | 3 ++-
> > > 1 file changed, 2 insertions(+), 1 deletion(-)
> > >
> > > diff --git a/Rules.monolithic b/Rules.monolithic
> > > index 7c4d035..acac675 100644
> > > --- a/Rules.monolithic
> > > +++ b/Rules.monolithic
> > > @@ -5,7 +5,8 @@
> > >
> > > # determine the policy version and current kernel version if
> possible
> > > pv := $(shell $(CHECKPOLICY) -V |cut -f 1 -d ' ')
> > > -kv := $(shell cat /selinux/policyvers)
> > > +selinuxfs_mnt = $(shell mount | grep selinuxfs | cut -f 3 -d ' ')
> > > +kv := $(shell cat $(selinuxfs_mnt)/policyvers)
> > >
> > > # dont print version warnings if we are unable to determine
> > > # the currently running kernel's policy version
> >
> > I'd like to do something like this, but I don't think this way is
> the best, as Gentoo, for example, has two mounts of selinuxfs (in /sys/fs/
> and / for compat). It seems like updating the selinuxconfig tool would be
> best, but Fedora doesn't include it. We might have to grep it from
> sestatus output. Or we could update the libselinux swig wrapper to export
> selinux_mnt, so we could use a python script to find the mount point.
> >
> > --
> > Chris PeBenito
> > Tresys Technology, LLC
> > www.tresys.com <http://www.tresys.com> | oss.tresys.com <
> http://oss.tresys.com>
> >
> >
>
>
> --
> Chris PeBenito
> Tresys Technology, LLC
> www.tresys.com | oss.tresys.com
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://oss.tresys.com/pipermail/refpolicy/attachments/20130607/f7ff613a/attachment.html
^ permalink raw reply [flat|nested] 6+ messages in thread
* [refpolicy] [PATCH 1/1] Remove the hard-coding of selinuxfs mountpoint
@ 2013-05-27 1:10 Qingtao Cao
0 siblings, 0 replies; 6+ messages in thread
From: Qingtao Cao @ 2013-05-27 1:10 UTC (permalink / raw)
To: refpolicy
Remove the hard-coding of selinuxfs mountpoint in Rules.monolithic,
especially since it has been relocated to /sys/fs/.
Signed-off-by: Qingtao Cao <qingtao.cao.au@gmail.com>
---
Rules.monolithic | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/Rules.monolithic b/Rules.monolithic
index 7c4d035..acac675 100644
--- a/Rules.monolithic
+++ b/Rules.monolithic
@@ -5,7 +5,8 @@
# determine the policy version and current kernel version if possible
pv := $(shell $(CHECKPOLICY) -V |cut -f 1 -d ' ')
-kv := $(shell cat /selinux/policyvers)
+selinuxfs_mnt = $(shell mount | grep selinuxfs | cut -f 3 -d ' ')
+kv := $(shell cat $(selinuxfs_mnt)/policyvers)
# dont print version warnings if we are unable to determine
# the currently running kernel's policy version
--
1.8.1.4
^ permalink raw reply related [flat|nested] 6+ messages in thread
end of thread, other threads:[~2013-06-07 6:35 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-05-28 9:28 [refpolicy] [PATCH 1/1] Remove the hard-coding of selinuxfs mountpoint Qingtao Cao
2013-06-05 17:35 ` Christopher J. PeBenito
2013-06-06 4:29 ` Qingtao Cao
2013-06-06 13:29 ` Christopher J. PeBenito
2013-06-07 6:35 ` Qingtao Cao
-- strict thread matches above, loose matches on Subject: below --
2013-05-27 1:10 Qingtao Cao
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.