On Wed, 2007-12-12 at 22:55 +0000, David Howells wrote: > Stephen Smalley <[EMAIL PROTECTED]> wrote: > > > More likely, run it at build time in your .spec file to generate > > cachefiles.conf, > > I don't think sticking it in cachefiles.conf is a good idea necessarily. > That has to be an administrator modifiable file. Is there a program I could > make cachefiles run directly and capture the output of that could give me the > info I want?
Yes, we could easily make a simple program that just invokes a libselinux function that in turn grabs the proper context from some context configuration file under /etc/selinux/$SELINUXTYPE/contexts/ and outputs it. Dan can help with that. > > then run it again maybe upon a policy update or if the user selects a > > different policy. > > How do I do that? -- Stephen Smalley National Security Agency - To unsubscribe from this list: send the line "unsubscribe linux-security-module" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html