http://perforce.freebsd.org/chv.cgi?CH=67473
Change 67473 by areisse@areisse_tislabs on 2004/12/21 17:32:00
Changes to policy for it to build, and run (sort of).
-initial sid for init is required on freebsd
-new genhomedircon that does not use python or try to guess things
from passwd file
Affected files ...
.. //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/Makefile#15 edit
.. //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/genhomedircon#1 add
.. //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/initial_sid_contexts#6 edit
Differences ...
==== //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/Makefile#15 (text+ko) ====
@@ -146,7 +146,7 @@
@echo "Building file_contexts ..."
@m4 $(ALL_TUNABLES) $(FCFILES) > $@.tmp
@grep -v "^/root" $@.tmp > $@.root
- @/usr/sbin/genhomedircon . $@.root > $@
+ ./genhomedircon $@.root > $@
@grep "^/root" $@.tmp >> $@
@-rm $@.tmp $@.root
==== //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/initial_sid_contexts#6 (text+ko) ====
@@ -11,8 +11,7 @@
sid file system_u:object_r:file_t
# Persistent label mapping is gone. This initial SID can be removed.
sid file_labels system_u:object_r:unlabeled_t
-# init_t is still used, but an initial SID is no longer required.
-sid init system_u:object_r:unlabeled_t
+sid init system_u:system_r:init_t
# any_socket is no longer used.
sid any_socket system_u:object_r:unlabeled_t
sid port system_u:object_r:port_t