From: domg472@gmail.com (Dominick Grift)
Date: Wed, 07 Jul 2010 16:31:38 +0200
Subject: [refpolicy] apps_livecd.patch
In-Reply-To: <4C348F2F.4090306@tresys.com>
References: <4C06B9EA.8080208@redhat.com> <4C348F2F.4090306@tresys.com>
Message-ID: <4C348FCA.8070109@gmail.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 07/07/2010 04:29 PM, Christopher J. PeBenito wrote:
> On 06/02/10 16:07, Daniel J Walsh wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F14/apps_livecd.patch
>>
>> Policy for livecd tool to allow it to build alternate livecd for
>> different os and policy versions.
> 
> Merged.
> 

This policy has a bug:

+seutil_domtrans_setfiles_mac(livecd_t)

should be: seutil_run_setfiles_mac(livecd_t, system_r)

Because else you will hit a constraint (no role is allowed the
setfiles_mac_t domain)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 261 bytes
Desc: OpenPGP digital signature
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100707/214aa44c/attachment.bin