[refpolicy] Transition unconfined users to dpkg_t domain

Daniel J Walsh dwalsh at redhat.com
Fri Jan 10 08:49:12 EST 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/10/2014 06:47 AM, Laurent Bigonville wrote:
> Le Thu, 09 Jan 2014 15:32:03 -0500, Stephen Smalley <sds at tycho.nsa.gov> a
> écrit :
> 
>> On 01/09/2014 03:26 PM, Daniel J Walsh wrote:
>>> 
>>> It has been like that for years.  Might have been a chicken and egg 
>>> problem on initial install.  RPM Now has better flexibility.
>> 
>> bootstrapping issue - needed to know the right domain prior to any policy
>> files being installed on the filesystem.
> 
> Does that means that rpm and dpkg are supposed to work even if the files in
> /etc/selinux/<my_current_policy> are missing?
> 
> With dpkg (that use the rpm_execcon-like function) I'm getting the 
> following error in that case: cannot get security labeling handle: No such
> file or directory
> 
I think this means you don't have a file_contexts file.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlLP+lgACgkQrlYvE4MpobMXfACggj7I6iIApIJ2ttLYMoUwZH06
gjUAoI7d58sCojX6hZIA9LJnhISRapcr
=n/U5
-----END PGP SIGNATURE-----


More information about the refpolicy mailing list