* What's a policy configuration file? @ 2014-05-01 16:55 dE 2014-05-01 17:11 ` Stephen Smalley 0 siblings, 1 reply; 7+ messages in thread From: dE @ 2014-05-01 16:55 UTC (permalink / raw) To: selinux Is this another name for policy source? ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: What's a policy configuration file? 2014-05-01 16:55 What's a policy configuration file? dE @ 2014-05-01 17:11 ` Stephen Smalley 2014-05-01 17:28 ` dE 0 siblings, 1 reply; 7+ messages in thread From: Stephen Smalley @ 2014-05-01 17:11 UTC (permalink / raw) To: dE; +Cc: selinux Typically, but you didn't provide any context or cite the source of the reference. One might use the term for an individual source file, the policy.conf file generated from all of the source files, or the final kernel binary policy file, although the latter is less likely. On Thu, May 1, 2014 at 9:55 AM, dE <de.techno@gmail.com> wrote: > Is this another name for policy source? > _______________________________________________ > Selinux mailing list > Selinux@tycho.nsa.gov > To unsubscribe, send email to Selinux-leave@tycho.nsa.gov. > To get help, send an email containing "help" to > Selinux-request@tycho.nsa.gov. ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: What's a policy configuration file? 2014-05-01 17:11 ` Stephen Smalley @ 2014-05-01 17:28 ` dE 2014-05-01 17:45 ` Stephen Smalley 2014-05-01 17:51 ` Dominick Grift 0 siblings, 2 replies; 7+ messages in thread From: dE @ 2014-05-01 17:28 UTC (permalink / raw) To: selinux On 05/01/14 22:41, Stephen Smalley wrote: > Typically, but you didn't provide any context or cite the source of > the reference. > One might use the term for an individual source file, the policy.conf > file generated from all of the source files, or the final kernel > binary policy file, although the latter is less likely. > > On Thu, May 1, 2014 at 9:55 AM, dE <de.techno@gmail.com> wrote: >> Is this another name for policy source? >> _______________________________________________ >> Selinux mailing list >> Selinux@tycho.nsa.gov >> To unsubscribe, send email to Selinux-leave@tycho.nsa.gov. >> To get help, send an email containing "help" to >> Selinux-request@tycho.nsa.gov. http://www.nsa.gov/research/_files/selinux/papers/policy2/x109.shtml http://selinuxproject.org/page/ConfigurationFiles#Policy_Configuration_Files I would like to know what the official website means -- it's definitely the sources. I hope I'll read about policy.conf in the NSA reference. ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: What's a policy configuration file? 2014-05-01 17:28 ` dE @ 2014-05-01 17:45 ` Stephen Smalley 2014-05-02 6:24 ` dE 2014-05-01 17:51 ` Dominick Grift 1 sibling, 1 reply; 7+ messages in thread From: Stephen Smalley @ 2014-05-01 17:45 UTC (permalink / raw) To: dE; +Cc: selinux First reference is talking about source configuration files, and the next section of that report describes how policy.conf is created and then compiled into the binary policy file. Second reference is talking about the configuration files installed on the system for use at runtime, which includes both the kernel binary policy file and various text configuration files used by userspace programs. The term could apply to either. On Thu, May 1, 2014 at 10:28 AM, dE <de.techno@gmail.com> wrote: > On 05/01/14 22:41, Stephen Smalley wrote: >> >> Typically, but you didn't provide any context or cite the source of >> the reference. >> One might use the term for an individual source file, the policy.conf >> file generated from all of the source files, or the final kernel >> binary policy file, although the latter is less likely. >> >> On Thu, May 1, 2014 at 9:55 AM, dE <de.techno@gmail.com> wrote: >>> >>> Is this another name for policy source? >>> _______________________________________________ >>> Selinux mailing list >>> Selinux@tycho.nsa.gov >>> To unsubscribe, send email to Selinux-leave@tycho.nsa.gov. >>> To get help, send an email containing "help" to >>> Selinux-request@tycho.nsa.gov. > > > http://www.nsa.gov/research/_files/selinux/papers/policy2/x109.shtml > > http://selinuxproject.org/page/ConfigurationFiles#Policy_Configuration_Files > > I would like to know what the official website means -- it's definitely the > sources. I hope I'll read about policy.conf in the NSA reference. > > _______________________________________________ > Selinux mailing list > Selinux@tycho.nsa.gov > To unsubscribe, send email to Selinux-leave@tycho.nsa.gov. > To get help, send an email containing "help" to > Selinux-request@tycho.nsa.gov. ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: What's a policy configuration file? 2014-05-01 17:45 ` Stephen Smalley @ 2014-05-02 6:24 ` dE 0 siblings, 0 replies; 7+ messages in thread From: dE @ 2014-05-02 6:24 UTC (permalink / raw) To: selinux On 05/01/14 23:15, Stephen Smalley wrote: > First reference is talking about source configuration files, and the > next section of that report describes how policy.conf is created and > then compiled into the binary policy file. > Second reference is talking about the configuration files installed on > the system for use at runtime, which includes both the kernel binary > policy file and various text configuration files used by userspace > programs. The term could apply to either. > > On Thu, May 1, 2014 at 10:28 AM, dE <de.techno@gmail.com> wrote: >> On 05/01/14 22:41, Stephen Smalley wrote: >>> Typically, but you didn't provide any context or cite the source of >>> the reference. >>> One might use the term for an individual source file, the policy.conf >>> file generated from all of the source files, or the final kernel >>> binary policy file, although the latter is less likely. >>> >>> On Thu, May 1, 2014 at 9:55 AM, dE <de.techno@gmail.com> wrote: >>>> Is this another name for policy source? >>>> _______________________________________________ >>>> Selinux mailing list >>>> Selinux@tycho.nsa.gov >>>> To unsubscribe, send email to Selinux-leave@tycho.nsa.gov. >>>> To get help, send an email containing "help" to >>>> Selinux-request@tycho.nsa.gov. >> >> http://www.nsa.gov/research/_files/selinux/papers/policy2/x109.shtml >> >> http://selinuxproject.org/page/ConfigurationFiles#Policy_Configuration_Files >> >> I would like to know what the official website means -- it's definitely the >> sources. I hope I'll read about policy.conf in the NSA reference. >> >> _______________________________________________ >> Selinux mailing list >> Selinux@tycho.nsa.gov >> To unsubscribe, send email to Selinux-leave@tycho.nsa.gov. >> To get help, send an email containing "help" to >> Selinux-request@tycho.nsa.gov. The policy.conf is used during build time to make small time changes in the resulting binary right? ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: What's a policy configuration file? 2014-05-01 17:28 ` dE 2014-05-01 17:45 ` Stephen Smalley @ 2014-05-01 17:51 ` Dominick Grift 2014-05-02 6:30 ` dE 1 sibling, 1 reply; 7+ messages in thread From: Dominick Grift @ 2014-05-01 17:51 UTC (permalink / raw) To: dE; +Cc: selinux On Thu, 2014-05-01 at 22:58 +0530, dE wrote: > http://www.nsa.gov/research/_files/selinux/papers/policy2/x109.shtml > > http://selinuxproject.org/page/ConfigurationFiles#Policy_Configuration_Files > > I would like to know what the official website means -- it's definitely > the sources. I hope I'll read about policy.conf in the NSA reference. I suppose it can have various meanings depending on the context in which the term is used. Policy IS configuration, and so any file with policy in it in any format could be referred to as "policy configuration" file Then there are the configuration files that are distributed with the policy configuration. I suppose technically those are "policy configuration" configuration files. There there is often also a configuration files that specifies the options with which a policy configuration is compiled, and so i suppose one could also refer to that file as a "policy configuration" configuration file. Welcome to the wonderful world of SELinux terminology! ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: What's a policy configuration file? 2014-05-01 17:51 ` Dominick Grift @ 2014-05-02 6:30 ` dE 0 siblings, 0 replies; 7+ messages in thread From: dE @ 2014-05-02 6:30 UTC (permalink / raw) To: selinux On 05/01/14 23:21, Dominick Grift wrote: > On Thu, 2014-05-01 at 22:58 +0530, dE wrote: > >> http://www.nsa.gov/research/_files/selinux/papers/policy2/x109.shtml >> >> http://selinuxproject.org/page/ConfigurationFiles#Policy_Configuration_Files >> >> I would like to know what the official website means -- it's definitely >> the sources. I hope I'll read about policy.conf in the NSA reference. > I suppose it can have various meanings depending on the context in which > the term is used. > > Policy IS configuration, and so any file with policy in it in any format > could be referred to as "policy configuration" file > > Then there are the configuration files that are distributed with the > policy configuration. I suppose technically those are "policy > configuration" configuration files. > > There there is often also a configuration files that specifies the > options with which a policy configuration is compiled, and so i suppose > one could also refer to that file as a "policy configuration" > configuration file. > > Welcome to the wonderful world of SELinux terminology! > I've never read about the config in para 3. As of the termionogy -- I'm sure the policy source file should be called policy source not 'policy config' for the same reason as C/C++ source files are called the source. ^ permalink raw reply [flat|nested] 7+ messages in thread
end of thread, other threads:[~2014-05-02 6:33 UTC | newest] Thread overview: 7+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2014-05-01 16:55 What's a policy configuration file? dE 2014-05-01 17:11 ` Stephen Smalley 2014-05-01 17:28 ` dE 2014-05-01 17:45 ` Stephen Smalley 2014-05-02 6:24 ` dE 2014-05-01 17:51 ` Dominick Grift 2014-05-02 6:30 ` dE
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.