Re: TTY question

[Ivan Gyurdiev <ivg2@xxxxxxxxxxx>]

>Why not just:
># access_terminal(domain, typeprefix)
>define(`access_terminal', `
>allow $1 $2_tty_device_t:chr_file rw_file_perms;
>allow $1 devtty_t:chr_file rw_file_perms;
>allow $1 devpts_t:dir r_dir_perms;
>allow $1 $2_devpts_t:chr_file rw_file_perms;
>') dnl access_terminal
>
>Then the usage in e.g. x_client_domain becomes:
>access_terminal($1_$2_t, $1)
>
>whereas elsewhere it may just be:
>access_terminal($1_t, $1) 


That's better :)
I'll write some patches against dwalsh's repository.
>
-- 
Ivan Gyurdiev <ivg2@xxxxxxxxxxx>
Cornell University


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.