Wow. A whole 15 seconds on google.
<a href="http://docs.sun.com/app/docs/doc/805-8022-05/6j7ht6u7k?a=view" target="_blank"> http://docs.sun.com/app/docs/doc/805-8022-05/6j7ht6u7k?a=vie w</a>
The following is an example of a tsolinfo file:
default label ADMIN_LOW[ADMIN_LOW]
default allowed_privs all
default forced_privs all
label usr/sbin/myfile ADMIN_HIGH[ADMIN_HIGH]
forced_privs usr/sbin/myfile file_mac_read
allowed_privs usr/sbin/myfile file_mac_read,file_mac_write
That help?
It's simple. I'm trying to generate a package with a tsolinfo file that contains an acl entry. None of the documentation I have found details what this entry is supposed to look like.
I know very well that setfacl and tsolinfo are two very different things, but I was hoping, in the absence of decent documentation, that the format would be similar. It isn't and it doesn't work.
In my opinion, this is a bug. Yet, nobody seems to want to acknowledge this.
What's more is nothing is said about setting such ACL attributes on MLDs.
If I could do that with a postinstall, I would.