From: Daniel De Graaf Date: Fri, 2 Dec 2011 21:44:26 +0000 (-0800) Subject: flask: Fix policy build with new checkpolicy X-Git-Url: https://dgit.raspbian.org/%22http://www.example.com/cgi/success//%22http:/www.example.com/cgi/success/?a=commitdiff_plain;h=64b8b98854e09202f420b8bb02cb915b8a03cd55;p=xen.git flask: Fix policy build with new checkpolicy Version 26 of checkpolicy (shipped with Fedora 16) now requires that roles be declared prior to setting types for a role. Add a declaration of the system_r role to fix the build of default XSM/FLASK policy. Signed-off-by: Daniel De Graaf Committed-by: Keir Fraser --- diff --git a/tools/flask/policy/policy/modules/xen/xen.te b/tools/flask/policy/policy/modules/xen/xen.te index 0977939146..d95a7da9b7 100644 --- a/tools/flask/policy/policy/modules/xen/xen.te +++ b/tools/flask/policy/policy/modules/xen/xen.te @@ -151,4 +151,5 @@ sid iomem gen_context(system_u:object_r:iomem_t,s0) sid ioport gen_context(system_u:object_r:ioport_t,s0) sid device gen_context(system_u:object_r:device_t,s0) +role system_r; role system_r types { xen_type domain_type };