Re: [PATCH] Explicitly declare the role "base_r"

From: Paul Moore
Date: Sun Jul 12 2015 - 20:24:45 EST


On Tue, Jul 7, 2015 at 5:10 PM, Laurent Bigonville <bigon@xxxxxxxxxx> wrote:
> From: Laurent Bigonville <bigon@xxxxxxxx>
>
> This fixes the compilation of policy generated by mdp with the recent
> version of checkpolicy.
>
> Signed-off-by: Laurent Bigonville <bigon@xxxxxxxx>
> ---
> scripts/selinux/mdp/mdp.c | 1 +
> 1 file changed, 1 insertion(+)

Merged into selinux#next, thank you.

> diff --git a/scripts/selinux/mdp/mdp.c b/scripts/selinux/mdp/mdp.c
> index 62b34ce..e10beb1 100644
> --- a/scripts/selinux/mdp/mdp.c
> +++ b/scripts/selinux/mdp/mdp.c
> @@ -98,6 +98,7 @@ int main(int argc, char *argv[])
>
> /* types, roles, and allows */
> fprintf(fout, "type base_t;\n");
> + fprintf(fout, "role base_r;\n");
> fprintf(fout, "role base_r types { base_t };\n");
> for (i = 0; secclass_map[i].name; i++)
> fprintf(fout, "allow base_t base_t:%s *;\n",
> --
> 2.1.4

--
paul moore
www.paul-moore.com
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/