Re: [Patch v3] sandbox: Use dbus-run-session instead of dbus-launch when available

2016-09-27 Thread Laurent Bigonville
Le 27/09/16 à 15:50, Stephen Smalley a écrit : On 09/27/2016 08:39 AM, Laurent Bigonville wrote: From: Laurent Bigonville According to dbus upstream: "dbus-launch is fairly horrible code, complicated by the historical need for it to support X11 autolaunching, so the D-Bus

Re: [Patch v3] sandbox: Use dbus-run-session instead of dbus-launch when available

2016-09-27 Thread Stephen Smalley
On 09/27/2016 09:49 AM, Laurent Bigonville wrote: > Le 27/09/16 à 15:50, Stephen Smalley a écrit : >> On 09/27/2016 08:39 AM, Laurent Bigonville wrote: >>> From: Laurent Bigonville >>> >>> According to dbus upstream: "dbus-launch is fairly horrible code, >>> complicated by the

Re: [PATCH v2] libselinux: add ANDROID_HOST=y build option

2016-09-27 Thread Stephen Smalley
On 09/26/2016 04:55 PM, William Roberts wrote: > On Mon, Sep 26, 2016 at 1:53 PM, wrote: >> From: William Roberts >> >> To build the selinux host configuration, specify >> ANDROID_HOST=y on the Make command line. >> >> eg) >> make

[Patch v3] sandbox: Use dbus-run-session instead of dbus-launch when available

2016-09-27 Thread Laurent Bigonville
From: Laurent Bigonville According to dbus upstream: "dbus-launch is fairly horrible code, complicated by the historical need for it to support X11 autolaunching, so the D-Bus maintainers would like to move it out of the critical path and minimize its use."

Re: [PATCH 1/1] genhomedircon: support policies using RBACSEP

2016-09-27 Thread Chris PeBenito
On 09/26/16 10:20, Stephen Smalley wrote: On 09/24/2016 04:26 AM, Dominick Grift wrote: On 09/23/2016 09:36 PM, Stephen Smalley wrote: On 09/23/2016 10:28 AM, Gary Tierney wrote: Introduces support for generating homedir/user contexts for policies that implement RBACSEP. The support works by

Re: [PATCH v2] libselinux: add ANDROID_HOST=y build option

2016-09-27 Thread William Roberts
On Tue, Sep 27, 2016 at 12:08 PM, Stephen Smalley wrote: > On 09/27/2016 03:03 PM, William Roberts wrote: >> On Tue, Sep 27, 2016 at 11:51 AM, Stephen Smalley wrote: >>> On 09/27/2016 02:43 PM, William Roberts wrote: On Sep 27, 2016 10:00, "Stephen

Re: [PATCH v2] libselinux: add ANDROID_HOST=y build option

2016-09-27 Thread Stephen Smalley
On 09/27/2016 03:09 PM, William Roberts wrote: > On Tue, Sep 27, 2016 at 12:08 PM, Stephen Smalley wrote: >> On 09/27/2016 03:03 PM, William Roberts wrote: >>> On Tue, Sep 27, 2016 at 11:51 AM, Stephen Smalley >>> wrote: On 09/27/2016 02:43 PM,

Re: [PATCH v2] libselinux: add ANDROID_HOST=y build option

2016-09-27 Thread William Roberts
>>> Don't you actually want to also pick up utils/sefcontext_compile? >>> That is built and used on the build host. And I'm not sure why we'd >>> drop the other SUBDIRS. >> >> You'll start running into linking issues if things that use >> libselinux, use something not >> in the build host IIRC.

Re: [PATCH v2] libselinux: add ANDROID_HOST=y build option

2016-09-27 Thread Stephen Smalley
On 09/27/2016 03:13 PM, William Roberts wrote: > Don't you actually want to also pick up utils/sefcontext_compile? That is built and used on the build host. And I'm not sure why we'd drop the other SUBDIRS. >>> >>> You'll start running into linking issues if things that use >>>

Re: [PATCH] libsemanage: Do not always print a module name warning

2016-09-27 Thread Stephen Smalley
On 09/27/2016 11:51 AM, Miroslav Grepl wrote: > From: Miroslav Grep > > 7a728e46 commit supposed to add a warning when a module name is > different than a filename, but this warning is printed always. This > commit fixes it. > > Fixes: > $ semodule -X 400 -i testmod.pp >

Re: [PATCH v2] libselinux: add ANDROID_HOST=y build option

2016-09-27 Thread William Roberts
On Tue, Sep 27, 2016 at 7:03 AM, Stephen Smalley wrote: > On 09/26/2016 04:55 PM, William Roberts wrote: >> On Mon, Sep 26, 2016 at 1:53 PM, wrote: >>> From: William Roberts >>> >>> To build the selinux host

Re: Android Fork

2016-09-27 Thread William Roberts
On Sep 27, 2016 07:52, "Jason Zaman" wrote: > > I just remembered that travis-ci has OSX stuff now. > https://docs.travis-ci.com/user/osx-ci-environment/ > > Maybe we should setup a .travis.yml for selinux to build all these > possible configurations going forward? At least

Re: [PATCH v2] libselinux: add ANDROID_HOST=y build option

2016-09-27 Thread William Roberts
On Tue, Sep 27, 2016 at 7:11 AM, Stephen Smalley wrote: > On 09/26/2016 04:53 PM, william.c.robe...@intel.com wrote: >> From: William Roberts >> >> To build the selinux host configuration, specify >> ANDROID_HOST=y on the Make command line. >> >>

Re: [PATCH 1/1] genhomedircon: support policies using RBACSEP

2016-09-27 Thread Dominick Grift
On Mon, Sep 26, 2016 at 10:20:12AM -0400, Stephen Smalley wrote: > On 09/24/2016 04:26 AM, Dominick Grift wrote: > > On 09/23/2016 09:36 PM, Stephen Smalley wrote: > >> On 09/23/2016 10:28 AM, Gary Tierney wrote: > >>> Introduces support for generating homedir/user contexts for > >>> policies that

Re: [PATCH v2] libselinux: add ANDROID_HOST=y build option

2016-09-27 Thread Stephen Smalley
On 09/27/2016 02:43 PM, William Roberts wrote: > On Sep 27, 2016 10:00, "Stephen Smalley" > wrote: >> >> On 09/27/2016 11:08 AM, William Roberts wrote: >> > On Tue, Sep 27, 2016 at 7:11 AM, Stephen Smalley

Re: [PATCH v2] libselinux: add ANDROID_HOST=y build option

2016-09-27 Thread William Roberts
On Sep 27, 2016 10:00, "Stephen Smalley" wrote: > > On 09/27/2016 11:08 AM, William Roberts wrote: > > On Tue, Sep 27, 2016 at 7:11 AM, Stephen Smalley wrote: > >> On 09/26/2016 04:53 PM, william.c.robe...@intel.com wrote: > >>> From: William Roberts

Re: [PATCH v2] libselinux: add ANDROID_HOST=y build option

2016-09-27 Thread William Roberts
On Tue, Sep 27, 2016 at 11:51 AM, Stephen Smalley wrote: > On 09/27/2016 02:43 PM, William Roberts wrote: >> On Sep 27, 2016 10:00, "Stephen Smalley" > > wrote: >>> >>> On 09/27/2016 11:08 AM, William Roberts wrote: >>> > On Tue,