From: sven.vermeulen@siphos.be (Sven Vermeulen) Date: Mon, 9 Jan 2012 21:42:32 +0100 Subject: [refpolicy] Contribute boinc policy from Fedora to Refpolicy In-Reply-To: <4F072E4F.5090808@redhat.com> References: <4F072E4F.5090808@redhat.com> Message-ID: <20120109204231.GD3416@siphos.be> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On Fri, Jan 06, 2012 at 12:24:31PM -0500, Daniel J Walsh wrote: > Please Review and ack. [...] What magic does boinc do with its boinc_var_lib_t files? > +exec_files_pattern(boinc_t, boinc_var_lib_t, boinc_var_lib_t) ^^ this > +domtrans_pattern(boinc_t, boinc_project_var_lib_t, boinc_project_t) ^^ and this I don't know boinc, but unless it only uses boinc_var_lib_t to create executables there (and nothing else) wouldn't we need a separate type for this? Wkr, Sven Vermeulen