From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from jazzhorn.ncsc.mil (mummy.ncsc.mil [144.51.88.129]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with SMTP id l26FtqfK003664 for ; Tue, 6 Mar 2007 10:55:52 -0500 Received: from exchange.columbia.tresys.com (jazzhorn.ncsc.mil [144.51.5.9]) by jazzhorn.ncsc.mil (8.12.10/8.12.10) with SMTP id l26FvHFA009719 for ; Tue, 6 Mar 2007 15:57:19 GMT Subject: Re: Don't audit restart of nscd daemon in strict policy From: "Christopher J. PeBenito" To: dwalsh@localhost.localdomain Cc: selinux@tycho.nsa.gov In-Reply-To: <200702261729.l1QHTPdT030641@localhost.localdomain> References: <200702261729.l1QHTPdT030641@localhost.localdomain> Content-Type: text/plain Date: Tue, 06 Mar 2007 10:57:01 -0500 Message-Id: <1173196621.917.0.camel@sgc> Mime-Version: 1.0 Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov On Mon, 2007-02-26 at 12:29 -0500, dwalsh@localhost.localdomain wrote: > ===File /tmp/patches/done/nsaserefpolicy_policy_modules_services_nscd.patch=== > --- nsaserefpolicy/policy/modules/services/nscd.te 2007-02-19 11:32:53.000000000 -0500 > +++ serefpolicy-2.5.5/policy/modules/services/nscd.te 2007-02-26 11:02:34.000000000 -0500 > @@ -117,6 +117,9 @@ > term_dontaudit_use_unallocated_ttys(nscd_t) > term_dontaudit_use_generic_ptys(nscd_t) > files_dontaudit_read_root_files(nscd_t) > +',` > + userdom_dontaudit_use_sysadm_ttys(nscd_t) > + userdom_dontaudit_use_sysadm_ptys(nscd_t) > ') > > optional_policy(` This should go with a run interface, then you get the transition, the role and these dontaudits. -- Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.