From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Tue, 27 Sep 2011 09:36:36 -0400 Subject: [refpolicy] dccp socket support In-Reply-To: <1317110300.2861.22.camel@x220.mydomain.internal> References: <1317110300.2861.22.camel@x220.mydomain.internal> Message-ID: <4E81D164.1030601@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 09/27/11 03:58, Dominick Grift wrote: > Can dccp socket support be merged/added to refpolicy? > > The dccp_socket class was added but refpolicy was never adapted to this > addition. I definitely don't oppose this, but I don't remember seeing much usage of DCCP. I wouldn't reject a patch because it has DCCP. > We tried to do this in Fedora, so that might be usable to some degree. > ( i guess it can at least be used as rough guide to what we think needs > to be done to add this support ) > > Please see the two commits regarding dccp sockets: > > http://git.fedorahosted.org/git/?p=selinux-policy.git&a=search&h=HEAD&st=commit&s=dccp I took a cursory look, and it seems ok, but some of the unrelated changes would have to be filtered out. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com