From: dominick.grift@gmail.com (Dominick Grift)
Date: Fri, 06 Dec 2013 15:33:08 +0100
Subject: [refpolicy] [PATCH 18/39] unconfined: make direct_sysadm_daemon
 apply to unconfined_r:unconfined_t as well
In-Reply-To: <52A1D61D.9050207@tresys.com>
References: <1383990320-3340-1-git-send-email-dominick.grift@gmail.com>
	<1383990320-3340-18-git-send-email-dominick.grift@gmail.com>
	<52A1D61D.9050207@tresys.com>
Message-ID: <1386340388.2469.65.camel@d30>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Fri, 2013-12-06 at 08:50 -0500, Christopher J. PeBenito wrote:

> I get an error:
> 
> /usr/bin/checkpolicy:  loading policy configuration from policy.conf
> policy/modules/system/unconfined.te":52:ERROR 'duplicate role transition for (unconfined_r,NetworkManager_exec_t,process)' at token ';' on line 2433460:
> #line 52
> 	role_transition unconfined_r direct_init_entry system_r;
> checkpolicy:  error(s) encountered while parsing configuration
> make: *** [policy.29] Error 1
> 
> 

Monolithic i assume. Because i did not see this in modular builts.

This can probably be easily fixed though

What is more important to me right now is to know that you are not
opposed to the idea of making direct_sysadm_daemon apply to unconfined_t
in general.

I am sorry though about all these built errors i should have tested it
more thoroughly...