From: sds@tycho.nsa.gov (Stephen Smalley)
Date: Mon, 10 Sep 2012 10:50:58 -0400
Subject: [refpolicy] Make refpolicy aware of the secure_firmware avperm
 of the capability2 security class
In-Reply-To: <1347093189.15262.102.camel@d30.localdomain>
References: <1347093189.15262.102.camel@d30.localdomain>
Message-ID: <1347288658.9456.55.camel@moss-pluto.epoch.ncsc.mil>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Sat, 2012-09-08 at 10:33 +0200, Dominick Grift wrote:
> Can we define that in refpolicy because vbetool needs it
> 
> http://git.fedorahosted.org/cgit/selinux-policy.git/commit/?h=master_contrib&id=ede99cf27691bc1f3ddb95059388315f31c5210b

Not until it gets defined in the mainline kernel.  Discussions on lkml
suggest that it won't have that name if/when it gets merged.

-- 
Stephen Smalley
National Security Agency