<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>I had tried the following, but it still complains about the missing kerberos_read_home_content call.<br><br>optional_policy(`<br> kerberos_rw_config(vasd_t)<br> kerberos_use(vasd_t)<br> optional_policy(`<br> kerberos_read_home_content(vasd_t)<br> ')<br>')<br><br><div>> Date: Thu, 6 Mar 2014 08:57:27 +0100<br>> From: mgrepl@redhat.com<br>> To: selinux@lists.fedoraproject.org<br>> CC: swazup@hotmail.com<br>> Subject: Re: Is there a way to use newer SELinux interface calls, but still compile on machines that don't have them.<br>> <br>> On 03/05/2014 10:35 PM, Jayson Hurst wrote:<br>> > I want to use the kerberos_read_home_content interface method, but it <br>> > seems to be a newer method that doesn't exist on RHEL 6.0, but it does <br>> > on RHEL 6.5. Is there a way to build a single policy that will take <br>> > advantage of this call if its there, but not fail to compile/install <br>> > if it is not?<br>> Yes,<br>> you want to use "optional_policy" block .<br>> <br>> http://mgrepl.wordpress.com/2012/03/23/when-should-you-use-the-optional_policy-block-statement/<br></div> </div></body>
</html>