diff options
| author | Daniel J Walsh <dwalsh@redhat.com> | 2010-07-22 17:01:25 -0400 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2010-07-23 05:12:13 +0200 |
| commit | 7a58bfa4aef88c9ddead6668d83640f762938e72 (patch) | |
| tree | 695ac07fc012006d000393fa3e43e71db46de9e2 /configure.ac | |
| parent | 28322e1eb6507f2f40418e2dcdc6ee33e38ecee6 (diff) | |
socket: SELinux support for socket creation.
It seems to work on my machine.
/proc/1/fd/20 system_u:system_r:system_dbusd_t:s0
/proc/1/fd/21 system_u:system_r:avahi_t:s0
And the AVC's seem to have dissapeared when a confined app trys to
connect to dbus or avahi.
If you run with this patch and selinux-policy-3.8.8-3.fc14.noarch
You should be able to boot in enforcing mode.
Diffstat (limited to 'configure.ac')
| -rw-r--r-- | configure.ac | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/configure.ac b/configure.ac index 03feb4319c..14622e47a0 100644 --- a/configure.ac +++ b/configure.ac @@ -105,6 +105,11 @@ PKG_CHECK_MODULES(DBUS, [ dbus-1 >= 1.3.2 ]) AC_SUBST(DBUS_CFLAGS) AC_SUBST(DBUS_LIBS) +PKG_CHECK_MODULES(SELINUX, [ libselinux ]) +AC_SUBST(SELINUX_CFLAGS) +AC_SUBST(SELINUX_LIBS) +AC_SEARCH_LIBS([is_selinux_enabled], [selinux], [], [AC_MSG_ERROR([*** libselinux library not found])]) + PKG_CHECK_MODULES(DBUSGLIB, [ dbus-glib-1 ]) AC_SUBST(DBUSGLIB_CFLAGS) AC_SUBST(DBUSGLIB_LIBS) |