[refpolicy] [PATCHv2 0/4] Separate domtrans/run interfaces for portage_fetch

Sven Vermeulen sven.vermeulen at siphos.be
Tue Sep 13 13:19:32 CDT 2011


This revised patchset updates the portage interfaces to support
portage_run_fetch and portage_domtrans_fetch, rather than including the
support for portage_fetch_t in the regular portage_run and portage_domtrans
interfaces.

I'm not sure how to best "mix" changes across refpolicy and
refpolicy::contrib. If the patches are not correctly made, this was what I
did:
- Make changes in contrib, then format-patch to generate patches
- Make changes in refpolicy, then format-patch to generate patches

I notice that git also supports "adding" the commits from contrib to the
patches in the main refpolicy, but I'm not sure that's the idea behind it
for refpolicy.

Changes since v1
----------------

- Removes the portage_fetch_t calls from portage_domtrans and portage_run
- Adds callers for portage_fetch_t (sysadm, unconfined and puppet for now)


More information about the refpolicy mailing list