From: dwalsh@redhat.com (Daniel J Walsh)
Date: Wed, 16 Mar 2011 17:32:52 -0400
Subject: [refpolicy] I think refpolicy should replace all corenet.*all_nodes
	with corenet.*generic_node()
Message-ID: <4D812C84.6090900@redhat.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Similarly corenet.*all_if with corenet.*generic_if()

If I add a label to an interface I want no domains to be able to use it,
except unconfined domains and domains I specify in a policy module.

Since we have only one generic node and one generic interface, I think
these are bugs.

I have just changed Fedora F15 to match this assumption.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk2BLIQACgkQrlYvE4MpobOSlQCcCoi6gQQ+FaMgrbdeAGa93Zqc
zkQAoMdMUkZ080563tJWSbE5Eor29EjB
=tadE
-----END PGP SIGNATURE-----