diff options
| author | Daniel De Graaf <dgdegra@tycho.nsa.gov> | 2011-12-02 13:44:26 -0800 |
|---|---|---|
| committer | Daniel De Graaf <dgdegra@tycho.nsa.gov> | 2011-12-02 13:44:26 -0800 |
| commit | 64b8b98854e09202f420b8bb02cb915b8a03cd55 (patch) | |
| tree | e22181b9dda620a208aa706cf2f3a2c17cc56086 /tools/flask | |
| parent | 96e9e0203347a74a07e8d681b6c6012d2f18d427 (diff) | |
| download | xen-64b8b98854e09202f420b8bb02cb915b8a03cd55.tar.gz xen-64b8b98854e09202f420b8bb02cb915b8a03cd55.tar.bz2 xen-64b8b98854e09202f420b8bb02cb915b8a03cd55.zip | |
flask: Fix policy build with new checkpolicy
Version 26 of checkpolicy (shipped with Fedora 16) now requires that
roles be declared prior to setting types for a role. Add a declaration
of the system_r role to fix the build of default XSM/FLASK policy.
Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
Committed-by: Keir Fraser <keir@xen.org>
Diffstat (limited to 'tools/flask')
| -rw-r--r-- | tools/flask/policy/policy/modules/xen/xen.te | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/tools/flask/policy/policy/modules/xen/xen.te b/tools/flask/policy/policy/modules/xen/xen.te index 0977939146..d95a7da9b7 100644 --- a/tools/flask/policy/policy/modules/xen/xen.te +++ b/tools/flask/policy/policy/modules/xen/xen.te @@ -151,4 +151,5 @@ sid iomem gen_context(system_u:object_r:iomem_t,s0) sid ioport gen_context(system_u:object_r:ioport_t,s0) sid device gen_context(system_u:object_r:device_t,s0) +role system_r; role system_r types { xen_type domain_type }; |