* [PATCH 09/17] Have sepolgen return additional constraint information
@ 2013-10-28 19:52 Daniel J Walsh
2013-10-29 13:06 ` Stephen Smalley
0 siblings, 1 reply; 4+ messages in thread
From: Daniel J Walsh @ 2013-10-28 19:52 UTC (permalink / raw)
To: eparis; +Cc: selinux
[-- Attachment #1: Type: text/plain, Size: 421 bytes --]
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
This patch allows sepolgen to also display the constraint information.
This patch looks good to me. acked.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlJuwJUACgkQrlYvE4MpobMrsACfbtdHjC53/DrMF1itoktLp+Tx
5WsAnR7fu93pNYhnIBJRUkfHid+yw/tZ
=/iGt
-----END PGP SIGNATURE-----
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: 0009-Have-sepolgen-return-additional-constraint-informati.patch --]
[-- Type: text/x-patch; name="0009-Have-sepolgen-return-additional-constraint-informati.patch", Size: 0 bytes --]
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [PATCH 09/17] Have sepolgen return additional constraint information
2013-10-28 19:52 [PATCH 09/17] Have sepolgen return additional constraint information Daniel J Walsh
@ 2013-10-29 13:06 ` Stephen Smalley
2013-10-29 15:09 ` Daniel J Walsh
2013-10-29 15:13 ` Daniel J Walsh
0 siblings, 2 replies; 4+ messages in thread
From: Stephen Smalley @ 2013-10-29 13:06 UTC (permalink / raw)
To: Daniel J Walsh; +Cc: eparis, selinux, Richard Haines
On 10/28/2013 03:52 PM, Daniel J Walsh wrote:
> This patch allows sepolgen to also display the constraint information.
> This patch looks good to me. acked.
Patches 1-3 applied on master.
Patches 4-9 applied on a separate constraintnames branch for further
review/testing and to await the updated kernel patch.
I suspect we'll need to go ahead and add the module version anyway just
to avoid breaking compatibility? Not optimal but I don't think we want
upstream SELinux userspace build to break a Fedora 19/20 box, or to
reuse the version number down the road for something completely
different. Unless you are going to push an update to 19 and 20 that
will downgrade all modules to the prior version (what could possibly go
wrong?).
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [PATCH 09/17] Have sepolgen return additional constraint information
2013-10-29 13:06 ` Stephen Smalley
@ 2013-10-29 15:09 ` Daniel J Walsh
2013-10-29 15:13 ` Daniel J Walsh
1 sibling, 0 replies; 4+ messages in thread
From: Daniel J Walsh @ 2013-10-29 15:09 UTC (permalink / raw)
To: Stephen Smalley; +Cc: eparis, selinux, Richard Haines
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 10/29/2013 09:06 AM, Stephen Smalley wrote:
> On 10/28/2013 03:52 PM, Daniel J Walsh wrote:
>> This patch allows sepolgen to also display the constraint information.
>> This patch looks good to me. acked.
>
> Patches 1-3 applied on master. Patches 4-9 applied on a separate
> constraintnames branch for further review/testing and to await the updated
> kernel patch.
>
> I suspect we'll need to go ahead and add the module version anyway just to
> avoid breaking compatibility? Not optimal but I don't think we want
> upstream SELinux userspace build to break a Fedora 19/20 box, or to reuse
> the version number down the road for something completely different.
> Unless you are going to push an update to 19 and 20 that will downgrade all
> modules to the prior version (what could possibly go wrong?).
>
Not likely.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlJvz5kACgkQrlYvE4MpobO0AACeJUaRqWEYC0dG3bvbSRSdQrpH
EFsAnAkJ20igXEmEP0CAvfIk/klWIDGf
=05z7
-----END PGP SIGNATURE-----
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [PATCH 09/17] Have sepolgen return additional constraint information
2013-10-29 13:06 ` Stephen Smalley
2013-10-29 15:09 ` Daniel J Walsh
@ 2013-10-29 15:13 ` Daniel J Walsh
1 sibling, 0 replies; 4+ messages in thread
From: Daniel J Walsh @ 2013-10-29 15:13 UTC (permalink / raw)
To: Stephen Smalley; +Cc: eparis, selinux, Richard Haines
[-- Attachment #1: Type: text/plain, Size: 1390 bytes --]
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 10/29/2013 09:06 AM, Stephen Smalley wrote:
> On 10/28/2013 03:52 PM, Daniel J Walsh wrote:
>> This patch allows sepolgen to also display the constraint information.
>> This patch looks good to me. acked.
>
> Patches 1-3 applied on master. Patches 4-9 applied on a separate
> constraintnames branch for further review/testing and to await the updated
> kernel patch.
>
> I suspect we'll need to go ahead and add the module version anyway just to
> avoid breaking compatibility? Not optimal but I don't think we want
> upstream SELinux userspace build to break a Fedora 19/20 box, or to reuse
> the version number down the road for something completely different.
> Unless you are going to push an update to 19 and 20 that will downgrade all
> modules to the prior version (what could possibly go wrong?).
>
>
> -- This message was distributed to subscribers of the selinux mailing
> list. If you no longer wish to subscribe, send mail to
> majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes
> as the message.
>
Well here is the patch for this.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlJv0IAACgkQrlYvE4MpobPzOgCg64w/kYLGklld3bT3nSEF3qXe
nwAAni97VHxOOjoumeexTx2yhzWy3uqR
=9Vop
-----END PGP SIGNATURE-----
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: 0011-Update-version-of-policy-file-to-match-what-was-ship.patch --]
[-- Type: text/x-patch; name="0011-Update-version-of-policy-file-to-match-what-was-ship.patch", Size: 0 bytes --]
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2013-10-29 15:13 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-10-28 19:52 [PATCH 09/17] Have sepolgen return additional constraint information Daniel J Walsh
2013-10-29 13:06 ` Stephen Smalley
2013-10-29 15:09 ` Daniel J Walsh
2013-10-29 15:13 ` Daniel J Walsh
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.