Re: SELinux: portage_ro_role

On Thu, Oct 15, 2015 at 12:02:41PM +0200, Luis Ressel wrote:
> our portage policy includes a portage_ro_role interface to allow
> read-only access to portage data. As usual with _role interfaces,
> according to the documentation the interface takes a role as the first
> ($1) and a type as the second argument ($2). However, the directives
> in the interface actually expect $1 to be a type.
> 
> So, we should either
> 1) replace $1 with $2 inside the interface, or
> 2) rename the interface to something without _role and fix the
>    documentation.

My suggestion is to go with 1 - fix the use of the $1 and $2 parameters.

Wkr,
	Sven Vermeulen