How should I run genfscon in my module?
Joshua Brindle
jbrindle at tresys.com
Wed Nov 1 15:27:59 UTC 2006
> From: Karl MacMillan [mailto:kmacmillan at mentalrootkit.com]
>
> > > I looked at fixing this by changing genfscon to use
> user_identifier
> > > instead of identifier (they are the same except user_identifier
> > > includes "-"). This made checkpolicy generate a syntax
> error for all
> > > genfscon statements - haven't tracked down what the
> problem is. The
> > > grammer still seems to be unambiguous.
> >
> > Use "user_id" instead. Otherwise, you'll get a syntax
> error when the
> > token is classified as an IDENTIFIER (first match) and the grammar
> > says that it must be a USER_IDENTIFIER.
>
> Right as usual.
>
Maybe make user_id more generic as it is no longer only used for users..
More information about the fedora-selinux-list
mailing list