From 64b8b98854e09202f420b8bb02cb915b8a03cd55 Mon Sep 17 00:00:00 2001 From: Daniel De Graaf Date: Fri, 2 Dec 2011 13:44:26 -0800 Subject: flask: Fix policy build with new checkpolicy Version 26 of checkpolicy (shipped with Fedora 16) now requires that roles be declared prior to setting types for a role. Add a declaration of the system_r role to fix the build of default XSM/FLASK policy. Signed-off-by: Daniel De Graaf Committed-by: Keir Fraser --- tools/flask/policy/policy/modules/xen/xen.te | 1 + 1 file changed, 1 insertion(+) (limited to 'tools/flask') diff --git a/tools/flask/policy/policy/modules/xen/xen.te b/tools/flask/policy/policy/modules/xen/xen.te index 0977939146..d95a7da9b7 100644 --- a/tools/flask/policy/policy/modules/xen/xen.te +++ b/tools/flask/policy/policy/modules/xen/xen.te @@ -151,4 +151,5 @@ sid iomem gen_context(system_u:object_r:iomem_t,s0) sid ioport gen_context(system_u:object_r:ioport_t,s0) sid device gen_context(system_u:object_r:device_t,s0) +role system_r; role system_r types { xen_type domain_type }; -- cgit v1.2.3