On Wed, 2008-01-30 at 11:37 -0600, Serge E. Hallyn wrote: > Quoting Stephen Smalley ([EMAIL PROTECTED]): > > > > On Wed, 2008-01-30 at 07:20 -0500, Stephen Smalley wrote: > > > On Tue, 2008-01-29 at 18:21 -0600, Serge E. Hallyn wrote: > > > > Here is a patch against this morning's ltp cvs snapshot to implement > > > > Stephen's suggestion of setting expand-check=0 for the duration of > > > > the policy load. This allowed me to get rid of the hack > > > > ++domain_type(test_create_no_t) in refpolicy/test_task_create.te, also > > > > done in this patch. > > > > > > > > (I think it also inlines a patch Stephen sent on jan 23 which > > > > wasn't yet in ltp cvs) > > > > > > As far as I can tell, no one has merged the two patches that I sent > > > earlier, which explains why you are still seeing failures (the one patch > > > I sent added permissions needed for the tests). I've seen no reply to > > > my patches, although I've seen other patches responded to. > > > > Actually, I see that your patch does include the permissions from my > > patch (still not sure why my patch hasn't been merged), so I don't know > > why you'd still be seeing failures. I only get 3 failures with my > > patch applied, on inherit and fdreceive (due to Fedora 8 policy granting > > fd:use permission liberally to all domains) and on task_create (due to > > the refpolicy granting process:fork to all domains), so I would only > > expect you to get 2 failures after your patch. > > Interesting. I'll look into some these on Friday. Here is the list of > failures btw:
Are you running mcstrans? If not, start it first. Original testsuite predates MCS/MLS and thus when it fabricates security contexts, it doesn't include a MCS/MLS level. mcstrans makes that transparent and thus it just works. Alternatively, the test scripts could be made a bit smarter. -- Stephen Smalley National Security Agency ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Ltp-list mailing list Ltp-list@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/ltp-list
