selinux October 2012 archive
Main Archive Page > Month Archives  > selinux archives
selinux: Re: [selinux-testsuite][PATCH] use auth_read_passwd onl

Re: [selinux-testsuite][PATCH] use auth_read_passwd only if defined

From: Stephen Smalley <sds_at_nospam>
Date: Fri Oct 05 2012 - 16:29:46 GMT
To: "Serge E. Hallyn" <serge@hallyn.com>

On Fri, 2012-10-05 at 14:27 +0000, Serge E. Hallyn wrote:
> Quoting Jan Stancek (jstancek@redhat.com):
> > This interface doesn't exist on older distros, for example RHEL6.
>
> Thanks, applied.
>
> > Signed-off-by: Jan Stancek <jstancek@redhat.com>
> > ---
> > policy/test_global.te | 4 +++-
> > 1 files changed, 3 insertions(+), 1 deletions(-)
> >
> > diff --git a/policy/test_global.te b/policy/test_global.te
> > index b92cc1c..3891f6e 100644
> > --- a/policy/test_global.te
> > +++ b/policy/test_global.te
> > @@ -90,5 +90,7 @@ selinux_compute_relabel_context(testdomain)
> > selinux_compute_user_contexts(testdomain)
> >
> > ifdef(`distro_redhat', `
> > -auth_read_passwd(testdomain)
> > + ifdef(`auth_read_passwd', `
> > + auth_read_passwd(testdomain)
> > + ')
> > ')

Also, at some point, we will want to fork the test policy for RHEL6
under redhat/6 as we have already previously done for RHEL4 and 5, as
the test policy will keep evolving for latest refpolicy and the amount
of divergence will grow over time. Might not be justified yet, but
seems inevitable given life cycle of RHEL.

-- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.