[gentoo-commits] proj/hardened-docs:master commit in: xml/selinux/

["Sven Vermeulen" <sven.vermeulen@siphos.be>]

commit:     381ff168558a6cdf10b1f0112e068e7e266dfdba
Author:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
AuthorDate: Wed Mar  2 20:42:37 2011 +0000
Commit:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
CommitDate: Wed Mar  2 20:42:37 2011 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-docs.git;a=commit;h=381ff168

Improve information on reference policy writing a bit

---
 xml/selinux/hb-using-policymodules.xml |   15 +++++++++++----
 1 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/xml/selinux/hb-using-policymodules.xml b/xml/selinux/hb-using-policymodules.xml
index f716e5d..c27df36 100644
--- a/xml/selinux/hb-using-policymodules.xml
+++ b/xml/selinux/hb-using-policymodules.xml
@@ -7,8 +7,8 @@
 <!-- $Header: /var/cvsroot/gentoo/xml/htdocs/proj/en/hardened/selinux/hb-install.xml,v 1.5 2010/06/25 16:07:19 pebenito Exp $ -->
 
 <sections>
-<version>0</version>
-<date>2010-12-01</date>
+<version>1</version>
+<date>2011-03-02</date>
 
 <section>
 <title>Writing Simple Policies</title>
@@ -218,8 +218,15 @@ This interface allows other modules to use the
 <c>mozilla_read_user_home_files</c> function if they want their domain to be
 able to (in this case) read the files in the mozilla_home_t domain. Of course,
 they can add all statements inside their own definition, but then they would
-have to require that the mozilla module is loaded or known. Instead, developers
-can <e>optionally</e> call an interface.
+have to require that the mozilla module is loaded, which might be a wrong
+assumption, and duplicate the same allow statements for each application.
+The use of interfaces makes policy development easier.
+</p>
+
+<p>
+Also, the reference policy allows the use of <e>optional</e> statements:
+a module can call an interface of another module, but this may not fail if
+the other module is not available on a users' system.
 </p>
 
 <p>