summaryrefslogtreecommitdiff
path: root/README
diff options
context:
space:
mode:
authorJukka Rissanen <jukka.rissanen@linux.intel.com>2012-11-12 14:07:58 +0200
committerPatrik Flykt <patrik.flykt@linux.intel.com>2012-11-23 12:58:52 +0200
commitacedf9d49b9a326771aeec755179e3ede3872cdd (patch)
treeb4eff171ca55eb9a4cb1d9fdfd9f6638848e051c /README
parent9b45848a88af4ae202bce346062a7c8db9bc6a66 (diff)
downloadconnman-acedf9d49b9a326771aeec755179e3ede3872cdd.tar.gz
connman-acedf9d49b9a326771aeec755179e3ede3872cdd.tar.bz2
connman-acedf9d49b9a326771aeec755179e3ede3872cdd.zip
selinux: Add Type Enforcement rule compilation
The SELinux rules are needed for VPN. They allow various vpn clients to send notifications to connman-vpnd via net.connman.Task dbus interface if the connman processes are run under systemd and the system is in enforcing mode.
Diffstat (limited to 'README')
-rw-r--r--README11
1 files changed, 11 insertions, 0 deletions
diff --git a/README b/README
index 4ae17a9c..52a2e4d5 100644
--- a/README
+++ b/README
@@ -191,6 +191,17 @@ For a working system, certain configuration options need to be enabled:
configured by other means, the command line client can be
disabled and the dependency on readline is removed.
+ --enable-selinux
+
+ Enable support for compiling SElinux type enforcement rules
+
+ The TE rules are needed if host environment is in enforcing
+ mode. Without this option, the VPN client process cannot
+ send notification to connman-vpnd via net.connman.Task
+ interface. The compiled connman-task.pp module needs to
+ also installed using this command
+ # semodule -i connman-task.pp
+ in order to enable the dbus access.
wpa_supplicant configuration
============================