>>SELinux Mailing List: by thread

• Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ]

From: Westerman, Mark <Mark.Westerman_at_csoconline.com>
subject: policy configurations files
Date: Tue, 28 Aug 2001 15:11:02 -0500

• This message: [ Message body ]
• Next message: Stephen Smalley: "Re: policy configurations files"
• Previous message: Stephen Smalley: "Re: No RAM swapout to disk for "sandbox" run programs"
• Next in thread: Stephen Smalley: "Re: policy configurations files"
• Reply: Stephen Smalley: "Re: policy configurations files"

To list:

I have making many modification to my policy configurations files. In the process I tried to make a common set of modifications for the domains/admin/sysadm.te and domains/user/user.te

In the parts that begin with

define(`user_domain',`
....

allow $1_t $1_home_t:dir create_dir_perms;
....

')

of course the sysadm domain is different for the domain.

What I would like to do is

file: domains/user/user.te

define(`user_domain',`
....

sinclude(includes/user-common.inc)
....

')

file: domains/admin/sysadm.te

define(`admin_domain',`
....

sinclude(includes/user-common.inc)
....

')

file: include/user-common.inc

allow $1_t $1_home_t:dir create_dir_perms;

because the line

allow $1_t $1_home_t:dir create_dir_perms;

is the same in both files.

When I tried this I got an error on the allow $1_t $1_home_t:dir create_dir_perms; line

I guess the real question is the sinclude() processed before or after the macro substitution

Thanks,
Mark Westerman

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

From: Stephen Smalley <sds_at_tislabs.com>
subject: Re: policy configurations files
Date: Wed, 29 Aug 2001 08:26:02 -0400 (EDT)

• This message: [ Message body ]
• Next message: Conan Callen: "Successful install"
• Previous message: Westerman, Mark: "policy configurations files"
• In reply to: Westerman, Mark: "policy configurations files"

On Tue, 28 Aug 2001, Westerman, Mark wrote:

> file: domains/user/user.te
>
> define(`user_domain',`
> ....
> sinclude(includes/user-common.inc)
> ....
> ')

The problem is that the sinclude is within the quotes, so it is not being expanded until the substitution occurs. You need to unquote the sinclude so that it is expanded as part of the macro definition, e.g.:

define(`user_domain',`
....
'
sinclude(includes/user-common.inc)
`
....
')

--
Stephen D. Smalley, NAI Labs
ssmalley@nai.com







--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

• Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ]

This archive was generated by hypermail 2.2.0 on Wed 11 Jun 2008 - 08:10:54 EDT