On 10/23/2018 09:56 AM, Ted Toth wrote:


On Tue, Oct 23, 2018 at 8:39 AM Stephen Smalley <s...@tycho.nsa.gov <mailto:s...@tycho.nsa.gov>> wrote:

    On 10/23/2018 09:33 AM, Ted Toth wrote:
     > Is it possible to modify/replace an existing mlsconstrain? In
    playing
     > around I created multiple instances of a mlsconstrain and
    variations of
     > mlsconstrains but haven't figured out how to clean them up as I get
     > "Error: Unknown keyword delete' when trying to delete my experiments.

    Possibly I misunderstand, but can't you just remove or replace the
    module that defined it previously?


We make some changes to several 'x_*' mls constraints which as far as I know are not part of a module.

They have to live in some module, base or otherwise.
You can extract the CIL for the module in which you defined them via semodule -cE <module-name>, e.g. semodule -cE base. Then you can edit them in that base.cil or other file and re-insert the updated one.




    BTW, selinux mailing list has moved to seli...@vger.kernel.org
    <mailto:seli...@vger.kernel.org>.

Thanks for the reminder now I just need gmail to remember :(

_______________________________________________
Selinux mailing list
Selinux@tycho.nsa.gov
To unsubscribe, send email to selinux-le...@tycho.nsa.gov.
To get help, send an email containing "help" to selinux-requ...@tycho.nsa.gov.

Reply via email to