James Carter wrote:
Dan's example used Refpolicy interfaces. Interfaces are very
useful and
provide a better layer of abstraction, but they are just m4 macros,
which have always been used in SELinux policy.
Interfaces should be used as much as possible, but it is not true that
you can't mix the old and new ways.
Mixing the plain rules and the m4 macros didn't work when I tried it - but perhaps I
just wasn’t writing it right. Is there a Refpolicy tutorial anywhere?
Moray.
"To err is human. To purr, feline"