From: mgrepl@redhat.com (Miroslav Grepl)
Date: Wed, 03 Dec 2014 10:27:09 +0100
Subject: [refpolicy] Syntax fixes in contrib
In-Reply-To: <20141202161542.GA16393@e145.network2>
References: <1416983956-8770-1-git-send-email-jason@perfinion.com>	<547DDB5A.3000307@tresys.com>
	<20141202161542.GA16393@e145.network2>
Message-ID: <547ED76D.5010709@redhat.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 12/02/2014 05:15 PM, Dominick Grift wrote:
> On Tue, Dec 02, 2014 at 10:31:38AM -0500, Christopher J. PeBenito wrote:
>> On 11/26/2014 1:38 AM, Jason Zaman wrote:
>>> I was going through the policy and adding all the _admin interfaces to sysadm
>>> in the gentoo policy and hit quite a number of syntax errors. They are mostly
>>> just typos and missing types in gen_require.
> The problem with the admin interfaces (any interfaces for that matter) is that unless they are called they aren't tested.
>
> This is also one of the reasons why i prefer only adding interfaces that are actually used.
>
> On that other hand, adding interfaces even if they aren't used does make sense for audit2allow/sepolgen-ifgen, and for the confined admin support
>
>
>
> _______________________________________________
> refpolicy mailing list
> refpolicy at oss.tresys.com
> http://oss.tresys.com/mailman/listinfo/refpolicy
We have tests for testing these _admin() interfaces in RHEL. I believe 
we could add them to Fedora to have them available.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://oss.tresys.com/pipermail/refpolicy/attachments/20141203/b5a422d1/attachment-0001.html