2010-03-27 15:04:40

by nicky726

[permalink] [raw]
Subject: [refpolicy] Missing userdom_stream_connect() interface

Hello,

I was trying to make my Konqueror and KDE policy compile with refpolicy trunk,
and found userdom_stream_connect() interface is no longer part of refpolicy.
OK I may have overslept some some important developement here on the mailing
list, but more important what to do now?

Without functionality from this interface confined konqueror don't even start.
I looked through userdomain.if file and found out some interesting templates
containing stream socket related stuff. Like userdom_base_user_template(). The
problem is that they seem to define lot of stuff I define in current version of
my policy, so I need to rework if to compile.

So to the point, I'd like to know if this way I'm heading is correct. That is
if mentioned template is the right one to switch from userdom_steam_connect()
interface.

And maybe if someone from Fedora will read this too, could he answer if such
change would still be compatible with current Fedora policy?

Or can you guys suggest me on which distro to test, if I want to be refpolicy
up-to-date?

Regards,
Ondrej Vadinsky

--
Don't it always seem to go
That you don't know what you've got
Till it's gone

(Joni Mitchell)