Re: squid patch

["Christopher J. PeBenito" <cpebenito@tresys.com>]

On Thu, 2007-04-19 at 11:08 -0400, Daniel J Walsh wrote:
> Added httpd_squid_script_t
> 
> squid_conf_t can be a directory
> Squid also needs additional ports to communicate with
> 
> dovecot and snmp try to read squid files.  (Snuck in a couple of other
> fixes for dovecot and snmp)

Merged except for the apache template, plus:

> +interface(`squid_dontaudit_search_squid_cache',`
> +       gen_require(`
> +               type squid_cache_t;
> +       ')
> +
> +       dontaudit $1 squid_cache_t:dir search_dir_perms;
> +')

Dropped the second squid in the name.

> --- nsaserefpolicy/policy/modules/services/snmp.te      2007-03-26 10:39:04.000000000 -0400
> +++ serefpolicy-2.5.12/policy/modules/services/snmp.te  2007-04-11 17:07:34.000000000 -0400
> @@ -134,6 +134,11 @@
>  ')
>  
>  optional_policy(`
> +       mta_read_config(snmpd_t)
> +       mta_search_queue(snmpd_t)
> +')

The second interface is missing.

>  optional_policy(`
> +       sendmail_read_log(snmpd_t)
> +')

This one is missing too.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.