Messages in this thread | | | From | David Howells <> | Subject | Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] | Date | Wed, 09 Jan 2008 18:56:20 +0000 |
| |
Stephen Smalley <sds@tycho.nsa.gov> wrote:
> Right, the latter is reasonable. > Requires adding the class and permission definition to > policy/flask/security_classes and policy/flask/access_vectors and then > regenerating the kernel headers from those files, ala: > svn co http://oss.tresys.com/repos/refpolicy/trunk refpolicy > cd refpolicy/policy/flask > vi security_classes access_vectors > <add new class to end> > make > make LINUX_D=/path/to/linux-2.6 tokern
Does this require rebuilding and updating all the SELinux rpms to know about the new class?
David
| |