Hello again Stephen and Paul.

On Thu, 01/12/2016 at 10.57 -0500, Stephen Smalley wrote:
> On 12/01/2016 10:07 AM, Stephen Smalley wrote:

[...]

> A couple of notes on this change:
> 
> - To fully test (beyond just confirming that it doesn't break
> anything
> when the policy capability is not defined), we'll need a patched
> libsepol and policy (and unfortunately it requires patching the base
> policy; can't be done via a policy module).  Can certainly provide
> those
> too but figured I'd wait to see the response to the kernel patch
> first.

The libsepol patch is straightforward.

You can have a look at the one I have posted on the 23rd of August 2016
under the subject "[PATCH] Update libsepol to support the policy
capability for AF_ALG sockets" and adapt it to the new policy
capability name and to the fact that you are now removing the Redhat
policy capability.

As for the Reference Policy patch, if you want, I can forward to you
the one that I had created at that time for the ALG_SOCKET family, so
that you can adapt it to the multiple socket types.

Same thing for the SELinux Testsuite patch: if you want, I can forward
to you the one that I had created at that time for the ALG_SOCKET
family and that would be enough for testing the new capability because
it's representative of all the new socket types.

With kind regards,

Guido
_______________________________________________
Selinux mailing list
Selinux@tycho.nsa.gov
To unsubscribe, send email to selinux-le...@tycho.nsa.gov.
To get help, send an email containing "help" to selinux-requ...@tycho.nsa.gov.

Reply via email to