Re: Updated policy

["Christopher J. PeBenito" <cpebenito@tresys.com>]

On Sat, 2005-12-10 at 00:26 -0500, Daniel J Walsh wrote:
> Added booleans to turn on httpd connecting to mysql/postgres as well as 
> relay.

merged.

> nis_signal_ypbind requires you to be able to read pidfile.

Not going to merge this, for a couple reasons.  First, it would still be
good to have an interface that allows just the signal, for the case that
the signaler already knows the PID.  Second, it introduces a large info
flow backchannel, since ypbid can write it's pid file.  This is a
candidate for a more abstract interface whose implementation would be to
call the signal interface and the read pid interface.

> mount command wants access to tty

This sounds specific to targeted since its devpts_t, shouldn't it be in
a ifdef(`targeted_policy' ?

>  needs to be able to search rpc_pipefs 
> in Fedora.

Added an interface to handle this, rather than the raw rule.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.