[redhat-lspp] LSPP Development Telecon 11/28/2005 Minutes

[Stephen Smalley]

On Tue, 2005-11-29 at 09:31 -0500, Stephen Smalley wrote:
> On Tue, 2005-11-29 at 07:55 -0600, George Wilson wrote:
> > Need to analyze NSA SELinux tescases and rebase to reference policy if
> > necessary.
> > Should be the same but may not.
> > Joy to look at.
> > Red Hat QA is running LTP version of SELinux testcases.
> 
> The obvious major issue with the testsuite is that the testsuite policy.
> The two problem areas will be:
> a) testsuite policy is currently copied into the policy source tree
> followed by a make load, so it needs to be converted to build a policy
> module instead and install it via semodule,

On this point, Dan has already extended audit2allow to generate requires
statements when generating allow rules from audit messages, so it should
be possible to also have it (or another script) generate such requires
statements for an existing .te file.  That would ease conversion of the
testsuite policy over to module form.

-- 
Stephen Smalley
National Security Agency