Re: Invalid context in targeted SELinux policy

["Daniel Musgrave" <dmusgrave@abodiosoftware.com>]

> role system_r types upgrade_t;

This did it; this isn't the first (and probably won't be the last) time that I've quickly read 'sysadm' and seen 'system'.

>Hmm...application_domain() includes a role statement for sysadm_r by
>default, and also includes a role statement for system_r if
>targeted_policy is defined, i.e. building targeted policy.  At least in
>the last release of the example policy.  But possibly that wasn't in the
>CentOS/RHEL policies as shipped.

It seems that in the global_macros.te supplied on this machine, the application_domain() only defines the sysadm_r role statement, while a later macro system_domain() defines system_r instead.  (And glancing at this second macro, it seems that it may be more appropriate for what I need anyway.)

Thanks very much for your help,

Daniel Musgrave
Abodio Software




--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.