diff options
| author | Nathan Straz <nstraz@redhat.com> | 2009-12-01 16:40:12 -0500 |
|---|---|---|
| committer | Nathan Straz <nstraz@redhat.com> | 2009-12-01 16:40:12 -0500 |
| commit | 8b217f49b7f1bd44be2b01f736a798552d752855 (patch) | |
| tree | 913133e72d6d61dbab259e06527f0ec7c6be7304 /SELinux/Makefile | |
| parent | 14144516bb141a4b5d088fd109c209904d27fda7 (diff) | |
| download | qarsh-8b217f49b7f1bd44be2b01f736a798552d752855.tar.gz qarsh-8b217f49b7f1bd44be2b01f736a798552d752855.tar.xz qarsh-8b217f49b7f1bd44be2b01f736a798552d752855.zip | |
Add system interfaces to qarshd policy
This allows qarshd to make any system interface transition.
Tested against selinux-policy-devel-2.4.6-264.el5.
Diffstat (limited to 'SELinux/Makefile')
| -rw-r--r-- | SELinux/Makefile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/SELinux/Makefile b/SELinux/Makefile index c810efb..8b978d7 100644 --- a/SELinux/Makefile +++ b/SELinux/Makefile @@ -10,7 +10,7 @@ qarshd.te: qarshd.te.in qarshd.te.trans # Pull all interfaces listed in policy.xml from the services or apps layer # which have one parameter named domains and whose name contains domtrans -allinterfaces := $(shell gxpp '//layer[@name = "services" or @name = "apps"]//interface[param/@name="domain" and count(param) = 1 and contains(@name, "domtrans")]/@name' $(selinux_devel)/policy.xml) +allinterfaces := $(shell gxpp '//layer[@name = "services" or @name = "apps" or @name = "system"]//interface[param/@name="domain" and count(param) = 1 and contains(@name, "domtrans")]/@name' $(selinux_devel)/policy.xml) badinterfaces := $(shell cat qarshd.bad-interfaces) # Filter out interfaces which break policy building or loading. |