What's a policy configuration file?

What's a policy configuration file?

[dE]

Is this another name for policy source?

Re: What's a policy configuration file?

[Stephen Smalley]

Typically, but you didn't provide any context or cite the source of
the reference.
One might use the term for an individual source file, the policy.conf
file generated from all of the source files, or the final kernel
binary policy file, although the latter is less likely.

On Thu, May 1, 2014 at 9:55 AM, dE <de.techno@gmail.com> wrote:
> Is this another name for policy source?
> _______________________________________________
> Selinux mailing list
> Selinux@tycho.nsa.gov
> To unsubscribe, send email to Selinux-leave@tycho.nsa.gov.
> To get help, send an email containing "help" to
> Selinux-request@tycho.nsa.gov.

Re: What's a policy configuration file?

[dE]

On 05/01/14 22:41, Stephen Smalley wrote:
> Typically, but you didn't provide any context or cite the source of
> the reference.
> One might use the term for an individual source file, the policy.conf
> file generated from all of the source files, or the final kernel
> binary policy file, although the latter is less likely.
>
> On Thu, May 1, 2014 at 9:55 AM, dE <de.techno@gmail.com> wrote:
>> Is this another name for policy source?
>> _______________________________________________
>> Selinux mailing list
>> Selinux@tycho.nsa.gov
>> To unsubscribe, send email to Selinux-leave@tycho.nsa.gov.
>> To get help, send an email containing "help" to
>> Selinux-request@tycho.nsa.gov.

http://www.nsa.gov/research/_files/selinux/papers/policy2/x109.shtml

http://selinuxproject.org/page/ConfigurationFiles#Policy_Configuration_Files

I would like to know what the official website means -- it's definitely 
the sources. I hope I'll read about policy.conf in the NSA reference.

Re: What's a policy configuration file?

[Stephen Smalley]

First reference is talking about source configuration files, and the
next section of that report describes how policy.conf is created and
then compiled into the binary policy file.
Second reference is talking about the configuration files installed on
the system for use at runtime, which includes both the kernel binary
policy file and various text configuration files used by userspace
programs.  The term could apply to either.

On Thu, May 1, 2014 at 10:28 AM, dE <de.techno@gmail.com> wrote:
> On 05/01/14 22:41, Stephen Smalley wrote:
>>
>> Typically, but you didn't provide any context or cite the source of
>> the reference.
>> One might use the term for an individual source file, the policy.conf
>> file generated from all of the source files, or the final kernel
>> binary policy file, although the latter is less likely.
>>
>> On Thu, May 1, 2014 at 9:55 AM, dE <de.techno@gmail.com> wrote:
>>>
>>> Is this another name for policy source?
>>> _______________________________________________
>>> Selinux mailing list
>>> Selinux@tycho.nsa.gov
>>> To unsubscribe, send email to Selinux-leave@tycho.nsa.gov.
>>> To get help, send an email containing "help" to
>>> Selinux-request@tycho.nsa.gov.
>
>
> http://www.nsa.gov/research/_files/selinux/papers/policy2/x109.shtml
>
> http://selinuxproject.org/page/ConfigurationFiles#Policy_Configuration_Files
>
> I would like to know what the official website means -- it's definitely the
> sources. I hope I'll read about policy.conf in the NSA reference.
>
> _______________________________________________
> Selinux mailing list
> Selinux@tycho.nsa.gov
> To unsubscribe, send email to Selinux-leave@tycho.nsa.gov.
> To get help, send an email containing "help" to
> Selinux-request@tycho.nsa.gov.

Re: What's a policy configuration file?

[Dominick Grift]

On Thu, 2014-05-01 at 22:58 +0530, dE wrote:

> http://www.nsa.gov/research/_files/selinux/papers/policy2/x109.shtml
> 
> http://selinuxproject.org/page/ConfigurationFiles#Policy_Configuration_Files
> 
> I would like to know what the official website means -- it's definitely 
> the sources. I hope I'll read about policy.conf in the NSA reference.

I suppose it can have various meanings depending on the context in which
the term is used.

Policy IS configuration, and so any file with policy in it in any format
could be referred to as "policy configuration" file

Then there are the configuration files that are distributed with the
policy configuration. I suppose technically those are "policy
configuration" configuration files.

There there is often also a configuration files that specifies the
options with which a policy configuration is compiled, and so i suppose
one could also refer to that file as a "policy configuration"
configuration file.

Welcome to the wonderful world of SELinux terminology! 

Re: What's a policy configuration file?

[dE]

On 05/01/14 23:15, Stephen Smalley wrote:
> First reference is talking about source configuration files, and the
> next section of that report describes how policy.conf is created and
> then compiled into the binary policy file.
> Second reference is talking about the configuration files installed on
> the system for use at runtime, which includes both the kernel binary
> policy file and various text configuration files used by userspace
> programs.  The term could apply to either.
>
> On Thu, May 1, 2014 at 10:28 AM, dE <de.techno@gmail.com> wrote:
>> On 05/01/14 22:41, Stephen Smalley wrote:
>>> Typically, but you didn't provide any context or cite the source of
>>> the reference.
>>> One might use the term for an individual source file, the policy.conf
>>> file generated from all of the source files, or the final kernel
>>> binary policy file, although the latter is less likely.
>>>
>>> On Thu, May 1, 2014 at 9:55 AM, dE <de.techno@gmail.com> wrote:
>>>> Is this another name for policy source?
>>>> _______________________________________________
>>>> Selinux mailing list
>>>> Selinux@tycho.nsa.gov
>>>> To unsubscribe, send email to Selinux-leave@tycho.nsa.gov.
>>>> To get help, send an email containing "help" to
>>>> Selinux-request@tycho.nsa.gov.
>>
>> http://www.nsa.gov/research/_files/selinux/papers/policy2/x109.shtml
>>
>> http://selinuxproject.org/page/ConfigurationFiles#Policy_Configuration_Files
>>
>> I would like to know what the official website means -- it's definitely the
>> sources. I hope I'll read about policy.conf in the NSA reference.
>>
>> _______________________________________________
>> Selinux mailing list
>> Selinux@tycho.nsa.gov
>> To unsubscribe, send email to Selinux-leave@tycho.nsa.gov.
>> To get help, send an email containing "help" to
>> Selinux-request@tycho.nsa.gov.

The policy.conf is used during build time to make small time changes in 
the resulting binary right?

Re: What's a policy configuration file?

[dE]

On 05/01/14 23:21, Dominick Grift wrote:
> On Thu, 2014-05-01 at 22:58 +0530, dE wrote:
>
>> http://www.nsa.gov/research/_files/selinux/papers/policy2/x109.shtml
>>
>> http://selinuxproject.org/page/ConfigurationFiles#Policy_Configuration_Files
>>
>> I would like to know what the official website means -- it's definitely
>> the sources. I hope I'll read about policy.conf in the NSA reference.
> I suppose it can have various meanings depending on the context in which
> the term is used.
>
> Policy IS configuration, and so any file with policy in it in any format
> could be referred to as "policy configuration" file
>
> Then there are the configuration files that are distributed with the
> policy configuration. I suppose technically those are "policy
> configuration" configuration files.
>
> There there is often also a configuration files that specifies the
> options with which a policy configuration is compiled, and so i suppose
> one could also refer to that file as a "policy configuration"
> configuration file.
>
> Welcome to the wonderful world of SELinux terminology!
>

I've never read about the config in para 3.

As of the termionogy -- I'm sure the policy source file should be called 
policy source not 'policy config' for the same reason as C/C++ source 
files are called the source.