package review?

Paul Howarth paul at city-fan.org
Mon Jul 24 12:01:13 UTC 2006


Wart wrote:
> Paul Howarth wrote:
>> Bear in mind that there should be a crossfire_disable_trans boolean that
>> would turn off the policy (or rather the transition to crossfire_t) when
>> set, without having to uninstall the policy.
> 
> Is it enough to add the boolean to crossfire.te, or do I need to add
> anything in the .if file as well?
> 
> type crossfire_t;
> type crossfire_exec_t;
> domain_type(crossfire_t)
> init_daemon_domain(crossfire_t, crossfire_exec_t)
> bool crossfire_disable_trans;

You shouldn't need to change anything; check the output of "getsebool 
-a" with your existing policy - you should already have the boolean, 
which should be defined because you used init_daemon_domain.

Paul.





More information about the fedora-selinux-list mailing list