[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: SELinux on Android

To: Stephen Smalley <sds@xxxxxxxxxxxxx>
Subject: Re: SELinux on Android
From: Bhargava Shastry <bshas3@xxxxxxxxx>
Date: Mon, 21 Nov 2011 19:18:54 +0100
Cc: Eric Paris <eparis@xxxxxxxxxxxxxx>, SELinux@xxxxxxxxxxxxx, James Morris <jmorris@xxxxxxxxx>
In-reply-to: <1321890697.9385.20.camel@moss-pluto>
References: <CAGGozWSLxn-SNzpc-jW+tZuEHAxOX0-Sn9PxDuyd7rLvvwempw@mail.gmail.com> <1320409924.1015.7.camel@moss-pluto> <CAGGozWR6yGyQaxgSED+NdAyLYGzkjDhdWmMxnB=B0qEBAEOtLA@mail.gmail.com> <1320425998.1015.31.camel@moss-pluto> <CAGGozWSziAmmDb-eO3AjVL=eRgeCHzGb6vo-uNpLy_2sxog2tQ@mail.gmail.com> <1320930750.13691.5.camel@moss-pluto> <CAGGozWQpW3Tvj00Rt44EEhk1qYn-w8BE07naY+MRQUbXurpYmQ@mail.gmail.com> <1320942368.13691.7.camel@moss-pluto> <CAGGozWRK117G=93o1=v0yM6HxdtbDRSZ8sKybDEYNEKjpyHMNA@mail.gmail.com> <CAGGozWR8pNNC6P1T8cYtbkfqZu56iVty+JdmXwudo3ZaAVbN-g@mail.gmail.com> <CACLa4puuN_nt+Hw3LU3UjYAJ9gGua=bEzt-ioXGv3=W41=1bBg@mail.gmail.com> <CAGGozWRxOzUiG33OvmEqX+Y4ywcGTfwx_8bVKuwQ31M_bdtN6Q@mail.gmail.com> <1321537184.4836.9.camel@moss-pluto> <CAGGozWT9PP-p4-UA6WJtiZmwHE1ot_Of85pKQRLGeab37e4kaQ@mail.gmail.com> <1321890697.9385.20.camel@moss-pluto>

You need to add a fs_use_xattr statement to your policy configuration
for yaffs2. Similar to the existing statements for ext[234].

Thanks. I have the sources for a reference SELinux policy from the tresys website. Unfortunately, with default policy build options, the resulting monolithic policy is huge. I am using an Ubuntu machine; any hints as to where to start for a minimal policy for Android. I tried selectively building only basic modules but there are intricate dependencies (checkpolicy throws up unresolved symbols error) between modules that is hard to disentangle.

Regards,
Bhargava Shastry

Follow-Ups:
- Re: SELinux on Android
  - From: Stephen Smalley

References:
- SELinux on Android
  - From: Bhargava Shastry
- Re: SELinux on Android
  - From: Stephen Smalley
- Re: SELinux on Android
  - From: Bhargava Shastry
- Re: SELinux on Android
  - From: Stephen Smalley
- Re: SELinux on Android
  - From: Bhargava Shastry
- Re: SELinux on Android
  - From: Stephen Smalley
- Re: SELinux on Android
  - From: Bhargava Shastry
- Re: SELinux on Android
  - From: Stephen Smalley
- Re: SELinux on Android
  - From: Bhargava Shastry
- Re: SELinux on Android
  - From: Bhargava Shastry
- Re: SELinux on Android
  - From: Eric Paris
- Re: SELinux on Android
  - From: Bhargava Shastry
- Re: SELinux on Android
  - From: Stephen Smalley
- Re: SELinux on Android
  - From: Bhargava Shastry
- Re: SELinux on Android
  - From: Stephen Smalley

Prev by Date: Re: SELinux on Android
Next by Date: Re: SELinux on Android
Previous by thread: Re: SELinux on Android
Next by thread: Re: SELinux on Android
Index(es):
- Date
- Thread

[Fedora Users] [Fedora Legacy] [Fedora Desktop] [Yosemite Photos] [Yosemite News] [Yosemite Campsites] [KDE Users] [Gnome Users]