[Seedit-devel] create domain

[himainu-ynakam at miomio.jp]

Hi.

> I am playing with seedit recently. Just curious if I can create a domain based on a directory, instead of a program? ie, I have a set of programs in /usr/myapp/bin, can I define a domain myapp_t for all under /usr/myapp/bin, instead of define one for each of them? 
Yes, you can, like below.

domain foodomain_t;
program /foo/**;

Programs under /foo runs as foodomain_t.
However, I have found bug now.
If there are subdirs under /foo, 
domains are not assigned programs under subdirs.

> Another question: is it possible to define domain based on both program and domain_trans? 
> I want the domain is used wheenver the program is launched, no matter
> from initrc_t or command line or /etc/init.d scripts or called by
> another program. 
> Thanks!
It is not possible now.
But I think it is not so difficult to hack seedit for that purpose.
If there is need, I may work that.

Regards,
Yuichi Nakamura