Re: refpolicy updates from debian

["Christopher J. PeBenito" <cpebenito@tresys.com>]

On Tue, 2006-09-05 at 16:33 +0200, Erich Schubert wrote:
> Hello Christopher,
> > this.  I have added the appropriate rules and fc entries.  However, I
> > don't see any options for usbmodules that would have it write to
> > usb.ids, so why does your patch have this access?
> 
> It's not supposed to, there is a script called update-usbids which does
> that. I assume it's being called from package postinsts, and should run
> with these permissions fine. But I havn't tested that. But usually the
> package managers can write regular files, can't they?

Yes, but what I'm referring to is:

+allow usbmodules_t usbmodules_var_lib_t:dir rw_dir_perms;
+allow usbmodules_t usbmodules_var_lib_t:file create_file_perms;

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.