SELinux and Shorewall with IPSets

[Dominick Grift]

On 06/30/2010 09:48 PM, Mr Dash Four wrote:
> 
>> hmm... i am not sure about this but maybe:
>>
>> role system_r types setfiles_mac_t;
>>
>> helps here..
>>   
> What do you mean?

Add that rule to the running policy:


policy_module(myseutils, 1.0.0)
gen_require(`
	type setfiles_mac_t;
	role system_r;
')
role system_r types setfiles_mac_t;

...
make -f /usr/share/selinux/devel/Makefile myseutils.pp
sudo semodule -i myseutils.pp

Again, this is a shot in the dark...

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 261 bytes
Desc: OpenPGP digital signature
Url : http://lists.fedoraproject.org/pipermail/selinux/attachments/20100630/c19d5072/attachment.bin