Is there any IPsec-Tools policy available in FC2?

[Park Lee]

On Wed, 12 Jan 2005 at 21:08, Petre Rodan wrote:
> latest Gentoo policies can be found here:
>
>
http://dev.gentoo.org/~kaiowas/policy/gentoo/domains/program/ipsec.te
>
http://dev.gentoo.org/~kaiowas/policy/gentoo/file_contexts/program/ipsec.fc
>
> net_contexts should also contain:
> ifdef(`ipsec.te', `portcon udp 500
system_u:object_r:isakmp_port_t')

  I've made some modifications in the ipsec.te and
ipsec.fc you mentioned above.and put them into the
proper location in Fedora Core 2.
  When I ran 'make load' in src/policy directory.
There came a WARNING as following:

... ...
/usr/bin/checkpolicy:  loading policy configuration
from policy.conf
domains/program/ipsec.te:63:WARNING 'conflicting rule
for (sysadm_locate_t, setkey_exec_t:process):  default
was setkey_t, is now sysadm_setkey_t' at token ';'
on line 120846:
#line 63
type_transition sysadm_t setkey_exec_t:process
sysadm_setkey_t;
... ...


  Why did it bring out such a WARNING?
  Is there a method to solve it?

  Thank you.



=====
Best Regards,
Park Lee


		
__________________________________ 
Do you Yahoo!? 
The all-new My Yahoo! - What will yours do?
http://my.yahoo.com