Re: appletalk sockets

["Christopher J. PeBenito" <cpebenito@tresys.com>]

On Wed, 2006-05-03 at 13:23 -0400, Christopher J. PeBenito wrote:
> On Tue, 02 May 2006 at 13:57 -0400, Christopher J. PeBenito wrote:
> > On Tue, 2006-05-02 at 13:30 -0400, Daniel J Walsh wrote:
> > > Christopher J. PeBenito wrote:
> > > > On Tue, 2006-05-02 at 10:08 -0400, Daniel J Walsh wrote:
> > > >> cups needs to be able to create socket to itself.
> > > >
> > > > This needs more investigation; we need to find out more about this
> > > > generic socket so we can add a specific class for it.
> > > >
> > > >   
> > >
> > http://www.redhat.com/archives/fedora-selinux-list/2006-April/msg00216.html
> > 
> > So it appears that a class for appletalk sockets needs to be added.
> 
> How about the attached patches?

Perhaps permissions should be added to netif for appletalk send/receive
too, so it doesn't fall through to rawip send/receive?

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.