diff options
| author | Havoc Pennington <hp@redhat.com> | 2004-07-30 05:59:34 +0000 |
|---|---|---|
| committer | Havoc Pennington <hp@redhat.com> | 2004-07-30 05:59:34 +0000 |
| commit | 1e9b185b0c274ef0d684b1e43418388225321e72 (patch) | |
| tree | 66bb08beb9ea1b4250953294134e2c995f8adf34 /test/data/valid-config-files | |
| parent | 4076d31c71bee332c4a697597a93345b45850b33 (diff) | |
2004-07-24 Havoc Pennington <hp@redhat.com>
SELinux support from Matthew Rickard <mjricka@epoch.ncsc.mil>
* bus/selinux.c, bus/selinux.h: new file encapsulating selinux
functionality
* configure.in: add --enable-selinux
* bus/policy.c (bus_policy_merge): add FIXME to a comment
* bus/main.c (main): initialize and shut down selinux
* bus/connection.c: store SELinux ID on each connection, to avoid
repeated getting of the string context and converting it into
an ID
* bus/bus.c (bus_context_get_policy): new accessor, though it
isn't used
(bus_context_check_security_policy): check whether the security
context of sender connection can send to the security context of
recipient connection
* bus/config-parser.c: add parsing for <selinux> and <associate>
* dbus/dbus-transport.c (_dbus_transport_get_unix_fd): to
implement dbus_connection_get_unix_fd()
* dbus/dbus-connection.c (dbus_connection_get_unix_fd): new
function, used by the selinux stuff
Diffstat (limited to 'test/data/valid-config-files')
| -rw-r--r-- | test/data/valid-config-files/basic.conf | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/test/data/valid-config-files/basic.conf b/test/data/valid-config-files/basic.conf index 4500ad70..73bd02ac 100644 --- a/test/data/valid-config-files/basic.conf +++ b/test/data/valid-config-files/basic.conf @@ -21,5 +21,12 @@ <limit name="max_connections_per_user">64</limit> <limit name="max_pending_activations">64</limit> <limit name="max_services_per_connection">256</limit> - + + <selinux> + <associate own="org.freedesktop.FrobationaryMeasures" + context="my_selinux_context_t"/> + <associate own="org.freedesktop.BlahBlahBlah" + context="foo_t"/> + </selinux> + </busconfig> |