package review?
Paul Howarth
paul at city-fan.org
Mon Jul 24 12:01:13 UTC 2006
Wart wrote:
> Paul Howarth wrote:
>> Bear in mind that there should be a crossfire_disable_trans boolean that
>> would turn off the policy (or rather the transition to crossfire_t) when
>> set, without having to uninstall the policy.
>
> Is it enough to add the boolean to crossfire.te, or do I need to add
> anything in the .if file as well?
>
> type crossfire_t;
> type crossfire_exec_t;
> domain_type(crossfire_t)
> init_daemon_domain(crossfire_t, crossfire_exec_t)
> bool crossfire_disable_trans;
You shouldn't need to change anything; check the output of "getsebool
-a" with your existing policy - you should already have the boolean,
which should be defined because you used init_daemon_domain.
Paul.
More information about the fedora-selinux-list
mailing list