diff options
| author | Jukka Rissanen <jukka.rissanen@linux.intel.com> | 2012-11-12 14:07:58 +0200 |
|---|---|---|
| committer | Patrik Flykt <patrik.flykt@linux.intel.com> | 2012-11-23 12:58:52 +0200 |
| commit | acedf9d49b9a326771aeec755179e3ede3872cdd (patch) | |
| tree | b4eff171ca55eb9a4cb1d9fdfd9f6638848e051c /README | |
| parent | 9b45848a88af4ae202bce346062a7c8db9bc6a66 (diff) | |
| download | connman-acedf9d49b9a326771aeec755179e3ede3872cdd.tar.gz connman-acedf9d49b9a326771aeec755179e3ede3872cdd.tar.bz2 connman-acedf9d49b9a326771aeec755179e3ede3872cdd.zip | |
selinux: Add Type Enforcement rule compilation
The SELinux rules are needed for VPN. They allow various vpn
clients to send notifications to connman-vpnd via net.connman.Task
dbus interface if the connman processes are run under systemd
and the system is in enforcing mode.
Diffstat (limited to 'README')
| -rw-r--r-- | README | 11 |
1 files changed, 11 insertions, 0 deletions
@@ -191,6 +191,17 @@ For a working system, certain configuration options need to be enabled: configured by other means, the command line client can be disabled and the dependency on readline is removed. + --enable-selinux + + Enable support for compiling SElinux type enforcement rules + + The TE rules are needed if host environment is in enforcing + mode. Without this option, the VPN client process cannot + send notification to connman-vpnd via net.connman.Task + interface. The compiled connman-task.pp module needs to + also installed using this command + # semodule -i connman-task.pp + in order to enable the dbus access. wpa_supplicant configuration ============================ |