On Mon, Dec 07, 2009 at 12:01:09PM +0000, Moray Henderson (ICT) wrote:
James Carter wrote:
>Dan's example used Refpolicy interfaces. Interfaces are very useful and
>provide a better layer of abstraction, but they are just m4 macros,
>which have always been used in SELinux policy.
>
>Interfaces should be used as much as possible, but it is not true that
>you can't mix the old and new ways.
Mixing the plain rules and the m4 macros didn't work when I tried it - but perhaps I
just wasn’t writing it right. Is there a Refpolicy tutorial anywhere?
I spend a little time today writing about the policy structure in Fedora. Maybe it can
help you or others:
http://82.197.205.60/~dgrift/stuff/Managing_a_SELinux_environment_with_Fe...
Moray.
"To err is human. To purr, feline"
--
fedora-selinux-list mailing list
fedora-selinux-list(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list