Changeset 158

Show
Ignore:
Timestamp:
01/08/08 13:10:15 (11 months ago)
Author:
bwilliams
Message:

added cool boolean and auditallow

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • branch/refpol-merged/src/selinux-policy-refpol/policy/global_booleans

    r153 r158  
    2323## <desc> 
    2424## <p> 
    25 ## boolean to determine whether the system permits loading policy, setting 
    26 ## enforcing mode, and changing boolean values.  Set this to true and you 
     25## boolean to determine whether the system permits loading policy and setting 
     26## enforcing mode.  Set this to true and you 
    2727## have to reboot to set it back 
    2828## </p> 
    2929## </desc> 
    3030gen_bool(secure_mode_policyload,false) 
     31 
     32## <desc> 
     33## <p> 
     34## log all relabels on the system  
     35## </p> 
     36## </desc> 
     37gen_bool(log_all_relabels,false) 
     38 

  • branch/refpol-merged/src/selinux-policy-refpol/policy/modules/kernel/files.te

    r153 r158  
    222222        allow files_unconfined_type file_type:file execmod; 
    223223') 
     224 
     225if(log_all_relabels) { 
     226        auditallow { domain unlabeled_t } { file_type unlabeled_t }:dir_file_class_set { relabelto relabelfrom }; 
     227}