From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Wed, 5 Jun 2013 13:35:29 -0400
Subject: [refpolicy] [PATCH 1/1] Remove the hard-coding of selinuxfs
	mountpoint
In-Reply-To: <1369733330-12010-1-git-send-email-qingtao.cao.au@gmail.com>
References: <1369733330-12010-1-git-send-email-qingtao.cao.au@gmail.com>
Message-ID: <51AF76E1.30304@tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 05/28/13 05:28, Qingtao Cao wrote:
> Remove the hard-coding of selinuxfs mountpoint in Rules.monolithic,
> especially since it has been relocated to /sys/fs/.
> 
> Signed-off-by: Qingtao Cao <qingtao.cao.au@gmail.com>
> ---
>  Rules.monolithic | 3 ++-
>  1 file changed, 2 insertions(+), 1 deletion(-)
> 
> diff --git a/Rules.monolithic b/Rules.monolithic
> index 7c4d035..acac675 100644
> --- a/Rules.monolithic
> +++ b/Rules.monolithic
> @@ -5,7 +5,8 @@
>  
>  # determine the policy version and current kernel version if possible
>  pv := $(shell $(CHECKPOLICY) -V |cut -f 1 -d ' ')
> -kv := $(shell cat /selinux/policyvers)
> +selinuxfs_mnt = $(shell mount | grep selinuxfs | cut -f 3 -d ' ')
> +kv := $(shell cat $(selinuxfs_mnt)/policyvers)
>  
>  # dont print version warnings if we are unable to determine
>  # the currently running kernel's policy version
 
I'd like to do something like this, but I don't think this way is the best, as Gentoo, for example, has two mounts of selinuxfs (in /sys/fs/ and / for compat).  It seems like updating the selinuxconfig tool would be best, but Fedora doesn't include it.  We might have to grep it from sestatus output.  Or we could update the libselinux swig wrapper to export selinux_mnt, so we could use a python script to find the mount point.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com