mirror of
https://github.com/SELinuxProject/selinux
synced 2024-12-13 01:24:49 +00:00
4613038d8e
On a SELinux disabled system the python call
`selinux.security_policyvers()` will fail.
Move the logic to find a binary policy from the python script
`sepolgen-ifgen` to the C-helper `sepolgen-ifgen-attr-helper`.
Change the helper command line interface to accept an optional policy
path as second argument. If not given try the current loaded policy
(`selinux_current_policy_path`) and if running on a SELinux disabled
system iterate over the default store path appending policy versions
starting at the maximum supported policy version
(`sepol_policy_kern_vers_max`).
This changes the helper command line interface from:
sepolgen-ifgen-attr-helper policy_file out_file
to
sepolgen-ifgen-attr-helper out_file [policy_file]
and adds a linkage to libselinux.
Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Acked-by: Stephen Smalley <stephen.smalley.work@gmail.com>
|
||
|---|---|---|
| .. | ||
| ru | ||
| .gitignore | ||
| audit2allow | ||
| audit2allow.1 | ||
| audit2why | ||
| audit2why.1 | ||
| Makefile | ||
| sepolgen-ifgen | ||
| sepolgen-ifgen-attr-helper.c | ||
| test_audit2allow.py | ||
| test_dummy_policy.cil | ||
| test.log | ||