Fedora 12 and unconfined_u sshdfilter

[Moray Henderson (ICT)]

James Carter wrote:
>Dan's example used Refpolicy interfaces.  Interfaces are very useful and
>provide a better layer of abstraction, but they are just m4 macros,
>which have always been used in SELinux policy.
>
>Interfaces should be used as much as possible, but it is not true that
>you can't mix the old and new ways.

Mixing the plain rules and the m4 macros didn't work when I tried it - but perhaps I just wasn’t writing it right.  Is there a Refpolicy tutorial anywhere?


Moray.
"To err is human.  To purr, feline"