On 11/4/19 11:02 PM, zer0 0ne wrote:
Thanks for the explanation Lukas. I have one follow up question
about the example you described,
"So yes, if you're compiling B policy, you needs to have a.if interface file in
one directory with B policy sources."
> If I have a.if in the B policy sources, is that sufficient or do I need to have a.te
also in B policy sources? When I experimented with just a.if B policy compilation failed
and was successful when I copied the a.te into B policy sources directory. Is this
expected or is it an issue with policies I have written.
You could have only a.if in B policy sources, *but* A policy (a.pp) has
to be loaded to the kernel before you installing B policy module.
Lukas.
_______________________________________________
selinux mailing list -- selinux(a)lists.fedoraproject.org
To unsubscribe send an email to selinux-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/selinux@lists.fedoraproject...
--
Lukas Vrabec
SELinux Evangelist,
Senior Software Engineer, Security Technologies
Red Hat, Inc.