[Xen-changelog] [xen-unstable] flask: Fix policy build with new checkpolicy

[Xen patchbot-unstable <patchbot@xxxxxxx>]

# HG changeset patch
# User Daniel De Graaf <dgdegra@xxxxxxxxxxxxx>
# Date 1322862266 28800
# Node ID fba8c4003f427e0ec8135d96a10f74b94d3178fd
# Parent  491c3ebf1d371d03fdd0aabe82b0f422037c67ba
flask: Fix policy build with new checkpolicy

Version 26 of checkpolicy (shipped with Fedora 16) now requires that
roles be declared prior to setting types for a role. Add a declaration
of the system_r role to fix the build of default XSM/FLASK policy.

Signed-off-by: Daniel De Graaf <dgdegra@xxxxxxxxxxxxx>
Committed-by: Keir Fraser <keir@xxxxxxx>
---


diff -r 491c3ebf1d37 -r fba8c4003f42 
tools/flask/policy/policy/modules/xen/xen.te
--- a/tools/flask/policy/policy/modules/xen/xen.te      Fri Dec 02 08:40:02 
2011 -0800
+++ b/tools/flask/policy/policy/modules/xen/xen.te      Fri Dec 02 13:44:26 
2011 -0800
@@ -151,4 +151,5 @@
 sid ioport gen_context(system_u:object_r:ioport_t,s0)
 sid device gen_context(system_u:object_r:device_t,s0)
 
+role system_r;
 role system_r types { xen_type domain_type };

_______________________________________________
Xen-changelog mailing list
Xen-changelog@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-changelog