Re: using an interface defined in another loaded module

Lukas Vrabec <[email protected]> Tue, 5 Nov 2019 11:01:22 +0100

Newsgroups	gmane.linux.redhat.fedora.selinux
Organization	Red Hat, Inc.
Message-ID	<[email protected]>

On 11/4/19 11:02 PM, zer0 0ne wrote:
> Thanks for the explanation Lukas.  I have one follow up question about the example you described, 
> 
> "So yes, if you're compiling B policy, you needs to have a.if interface file in one directory with B policy sources."
>> If I have a.if in the B policy sources, is that sufficient or do I need to have a.te also in B policy sources? When I experimented with just a.if B policy compilation failed and was successful when I copied the a.te into B policy sources directory. Is this expected or is it an issue with policies I have written.

You could have only a.if in B policy sources, *but* A policy (a.pp) has
to be loaded to the kernel before you installing B policy module.

Lukas.

> _______________________________________________
> selinux mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
> 


-- 
Lukas Vrabec
SELinux Evangelist,
Senior Software Engineer, Security Technologies
Red Hat, Inc.

_______________________________________________
selinux mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]

signature.asc (application/pgp-signature, 488 B)