checkpolicy doesn't know interface "gnome_manage_generic_home_content"

Miroslav Grepl mgrepl at redhat.com
Mon Dec 29 10:27:56 UTC 2014


On 12/26/2014 08:13 PM, Shintaro Fujiwara wrote:
> Hi, I'm making a module on related to gnome.
>
> I want to use interface "gnome_manage_generic_home_content", but 
> checkpolicy complains don't know the interface.
>
> gnome.if in latest refpolicy has "gnome_manage_generic_home_content".
>
> It seems he knows not "gnome_manage_generic_home_content" but 
> "gnome_manage_generic_home_dirs".
>
> ###################################
> module local 1.0;
>
> require {
>         type mytype_t;
>
>         class lnk_file { getattr read };
>         class dir { create open getattr setattr read write link unlink 
> rename search add_name remove_name reparent rmdir lock ioctl };
>
> }
>
> gnome_manage_generic_home_content(mytype_t)
> #gnome_manage_generic_home_dirs(mytype_t)  <- works fine !
> ####################################
> [root at localhost xxx]# make -f /usr/share/selinux/devel/Makefile local.pp
> Compiling targeted local module
> /usr/bin/checkmodule:  loading policy configuration from tmp/local.tmp
> local.te:13:ERROR 'syntax error' at token 
> 'gnome_manage_generic_home_content' on line 991:
>
> gnome_manage_generic_home_content(mytype_t)
> /usr/bin/checkmodule:  error(s) encountered while parsing configuration
> /usr/share/selinux/devel/include/Makefile:154: recipe for target 
> 'tmp/local.mod' failed
> make: *** [tmp/local.mod] Error 1
> ####################################
> checkpolicy version
> [fujiwara at localhost ~]$ rpm -qf /usr/bin/checkmodule
> checkpolicy-2.3-4.fc21.x86_64
>
We have

gnome_manage_generic_home_files()
gnome_manage_generic_home_dirs()

interfaces for this in Fedora.
>
>
>
>
>
> -- 
> 日本にヘヴィメタル・ハードロックを根付かせるページ
> http://heavymetalhardrock.no-ip.info/
>
> 世界中でセキュアOSのSELinuxを使いやすくするフリーソフト
> http://sourceforge.net/projects/segatex/
>
> CMS(PHPとPostgreSQLを使ったフリーソフト)
> http://sourceforge.net/projects/webon/
> https://github.com/intrajp/irforum_jp
>
>
> --
> selinux mailing list
> selinux at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/selinux

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/selinux/attachments/20141229/4b422bb2/attachment.html>


More information about the selinux mailing list