On 11/4/19 11:02 PM, zer0 0ne wrote:
Thanks for the explanation Lukas. I have one follow up question about the example you described,
"So yes, if you're compiling B policy, you needs to have a.if interface file in one directory with B policy sources."
If I have a.if in the B policy sources, is that sufficient or do I need to have a.te also in B policy sources? When I experimented with just a.if B policy compilation failed and was successful when I copied the a.te into B policy sources directory. Is this expected or is it an issue with policies I have written.
You could have only a.if in B policy sources, *but* A policy (a.pp) has to be loaded to the kernel before you installing B policy module.
Lukas.
selinux mailing list -- selinux@lists.fedoraproject.org To unsubscribe send an email to selinux-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/selinux@lists.fedoraproject.or...