fedora-selinux August 2010 archive
Main Archive Page > Month Archives  > fedora-selinux archives
fedora-selinux: Re: pipefs AVC

Re: pipefs AVC

From: Dominick Grift <domg472_at_nospam>
Date: Sun Aug 29 2010 - 13:02:55 GMT
To: Mr Dash Four <mr.dash.four@googlemail.com>

On 08/29/2010 02:55 PM, Mr Dash Four wrote:
>
>> As for looking stuff up, i use eclipse-slide. Basically i have refpolicy
>> imported into slide and build in slide that will expose the macros so
>> you can just hover over them and see their contents or alter click and
>> choose open declaration or just click them and look in the declaration
>> pane. Theres also a filter window which lets you easily search for
>> interfaces.
>>
> Bummer! I use Eclipse extensively in my everyday job (as well as at
> home) and that is the first time I've read about eclipse-slide!
>
> Google reveals this - http://oss.tresys.com/projects/slide/wiki/download
> - and from this it seems a pretty handy tool to have. Does it resolve
> macros with $1 and/or $2 in their names (like corenet_bind_dns_port ->
> corenet_bind_$1_port for example)?

Not like that ( that is not how the corenet interfaces are used) but for
example if you hover over an interface call for example
files_search_etc() it will tell you in a tooltip what parameters it
takes (in this example $1 is domain)

But also with the $* variables once you get familiar with policy you
basically know what parameters are needed to accomplish a valid access
vector or set of access vectors.

The corenet interfaces are generated automatically when you declare a
port type. So these interfaces are very consistent (each port type as
the same set of interfaces to use. The only difference is the type
prefix in the interface names.

-- selinux mailing list selinux@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux