PERFORCE change 67473 for review

[Andrew Reisse]

http://perforce.freebsd.org/chv.cgi?CH=67473

Change 67473 by areisse at areisse_tislabs on 2004/12/21 17:32:00

	Changes to policy for it to build, and run (sort of).
	-initial sid for init is required on freebsd
	-new genhomedircon that does not use python or try to guess things
	 from passwd file

Affected files ...

.. //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/Makefile#15 edit
.. //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/genhomedircon#1 add
.. //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/initial_sid_contexts#6 edit

Differences ...

==== //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/Makefile#15 (text+ko) ====

@@ -146,7 +146,7 @@
 	@echo "Building file_contexts ..."
 	@m4 $(ALL_TUNABLES) $(FCFILES) > $@.tmp
 	@grep -v "^/root" $@.tmp > $@.root
-	@/usr/sbin/genhomedircon . $@.root  > $@
+	./genhomedircon $@.root  > $@
 	@grep "^/root" $@.tmp >> $@
 	@-rm $@.tmp $@.root
 

==== //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/initial_sid_contexts#6 (text+ko) ====

@@ -11,8 +11,7 @@
 sid file	system_u:object_r:file_t
 # Persistent label mapping is gone.  This initial SID can be removed.
 sid file_labels	system_u:object_r:unlabeled_t
-# init_t is still used, but an initial SID is no longer required.
-sid init	system_u:object_r:unlabeled_t
+sid init	system_u:system_r:init_t
 # any_socket is no longer used.
 sid any_socket 	system_u:object_r:unlabeled_t
 sid port	system_u:object_r:port_t
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message