|Main Archive Page > Month Archives > selinux archives|
On Thu, 2007-09-20 at 17:06 -0400, Stephen Smalley wrote:
> On Thu, 2007-09-20 at 10:03 -0700, Clarkson, Mike R (US SSA) wrote:
> > Is there a way to set variables in a file context file?
> > For instance, I'd like to be able to do something like this in my .fc
> > files
> > ORACLE_HOME = '/opt/nl/oracle/ora10gR2/app/oracle/product/10.2.0/db_1'
> > $ORACLE_HOME/lib/lib.+\.a -- gen_context(system_u:object_r:lib_t,s0)
> > $ORACLE_HOME/lib32/lib.+\.a -- gen_context(system_u:object_r:lib_t,s0)
> > ...
> > That way if my ORACLE_HOME changes, I only have to change a single line
> The source .fc files are run through the m4 preprocessor like everything
> else (that is how gen_context gets expanded). So you can define a m4
> macro and use it in the source .fc file. But the .fc file that gets
> packaged into a .pp file has already been preprocessed.
rather than define an m4 macro, i'm substituting for the default, if necessary, at policy rpm build time. an m4 macro might be a cleaner way to go.
my code in progress is here:
if your oracle policy is in better shape than mine please send tips, hints and patches. :)
rob. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to firstname.lastname@example.org with the words "unsubscribe selinux" without quotes as the message.