How should I run genfscon in my module?

Joshua Brindle jbrindle at tresys.com
Wed Nov 1 15:27:59 UTC 2006


> From: Karl MacMillan [mailto:kmacmillan at mentalrootkit.com] 
> 
> > > I looked at fixing this by changing genfscon to use 
> user_identifier 
> > > instead of identifier (they are the same except user_identifier 
> > > includes "-"). This made checkpolicy generate a syntax 
> error for all 
> > > genfscon statements - haven't tracked down what the 
> problem is. The 
> > > grammer still seems to be unambiguous.
> > 
> > Use "user_id" instead.  Otherwise, you'll get a syntax 
> error when the 
> > token is classified as an IDENTIFIER (first match) and the grammar 
> > says that it must be a USER_IDENTIFIER.
> 
> Right as usual.
> 

Maybe make user_id more generic as it is no longer only used for users..




More information about the fedora-selinux-list mailing list