* [PATCH] refpolicy: services_automount changes
@ 2007-08-02 21:00 dwalsh
2007-09-07 13:33 ` Christopher J. PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: dwalsh @ 2007-08-02 21:00 UTC (permalink / raw)
To: cpebenito; +Cc: selinux
automount reads /dev/rand
corecmd_exec_bin defined twice
--- nsaserefpolicy/policy/modules/services/automount.te 2007-07-25 10:37:42.000000000 -0400
+++ serefpolicy-3.0.5/policy/modules/services/automount.te 2007-08-02 11:02:02.000000000 -0400
@@ -69,6 +69,7 @@
files_mounton_all_mountpoints(automount_t)
files_mount_all_file_type_fs(automount_t)
files_unmount_all_file_type_fs(automount_t)
+files_manage_non_security_dirs(automount_t)
fs_mount_all_fs(automount_t)
fs_unmount_all_fs(automount_t)
@@ -99,6 +100,7 @@
dev_read_sysfs(automount_t)
# for SSP
+dev_read_rand(automount_t)
dev_read_urand(automount_t)
domain_use_interactive_fds(automount_t)
@@ -147,10 +149,6 @@
userdom_dontaudit_search_sysadm_home_dirs(automount_t)
optional_policy(`
- corecmd_exec_bin(automount_t)
-')
-
-optional_policy(`
bind_search_cache(automount_t)
')
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [PATCH] refpolicy: services_automount changes
2007-08-02 21:00 [PATCH] refpolicy: services_automount changes dwalsh
@ 2007-09-07 13:33 ` Christopher J. PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2007-09-07 13:33 UTC (permalink / raw)
To: dwalsh; +Cc: selinux
On Thu, 2007-08-02 at 17:00 -0400, dwalsh@redhat.com wrote:
> automount reads /dev/rand
> corecmd_exec_bin defined twice
Merged.
> --- nsaserefpolicy/policy/modules/services/automount.te 2007-07-25
> 10:37:42.000000000 -0400
> +++ serefpolicy-3.0.5/policy/modules/services/automount.te
> 2007-08-02 11:02:02.000000000 -0400
> @@ -69,6 +69,7 @@
> files_mounton_all_mountpoints(automount_t)
> files_mount_all_file_type_fs(automount_t)
> files_unmount_all_file_type_fs(automount_t)
> +files_manage_non_security_dirs(automount_t)
>
> fs_mount_all_fs(automount_t)
> fs_unmount_all_fs(automount_t)
> @@ -99,6 +100,7 @@
>
> dev_read_sysfs(automount_t)
> # for SSP
> +dev_read_rand(automount_t)
> dev_read_urand(automount_t)
>
> domain_use_interactive_fds(automount_t)
> @@ -147,10 +149,6 @@
> userdom_dontaudit_search_sysadm_home_dirs(automount_t)
>
> optional_policy(`
> - corecmd_exec_bin(automount_t)
> -')
> -
> -optional_policy(`
> bind_search_cache(automount_t)
> ')
>
>
>
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2007-09-07 13:34 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2007-08-02 21:00 [PATCH] refpolicy: services_automount changes dwalsh
2007-09-07 13:33 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.