Date: Tue, 21 Dec 2004 17:32:56 GMT From: Andrew Reisse <areisse@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 67473 for review Message-ID: <200412211732.iBLHWudn067951@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=67473 Change 67473 by areisse@areisse_tislabs on 2004/12/21 17:32:00 Changes to policy for it to build, and run (sort of). -initial sid for init is required on freebsd -new genhomedircon that does not use python or try to guess things from passwd file Affected files ... .. //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/Makefile#15 edit .. //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/genhomedircon#1 add .. //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/initial_sid_contexts#6 edit Differences ... ==== //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/Makefile#15 (text+ko) ==== @@ -146,7 +146,7 @@ @echo "Building file_contexts ..." @m4 $(ALL_TUNABLES) $(FCFILES) > $@.tmp @grep -v "^/root" $@.tmp > $@.root - @/usr/sbin/genhomedircon . $@.root > $@ + ./genhomedircon $@.root > $@ @grep "^/root" $@.tmp >> $@ @-rm $@.tmp $@.root ==== //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/initial_sid_contexts#6 (text+ko) ==== @@ -11,8 +11,7 @@ sid file system_u:object_r:file_t # Persistent label mapping is gone. This initial SID can be removed. sid file_labels system_u:object_r:unlabeled_t -# init_t is still used, but an initial SID is no longer required. -sid init system_u:object_r:unlabeled_t +sid init system_u:system_r:init_t # any_socket is no longer used. sid any_socket system_u:object_r:unlabeled_t sid port system_u:object_r:port_t
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200412211732.iBLHWudn067951>