* [PATCH] refpolicy: services_audioentropy changes
@ 2007-08-02 21:00 dwalsh
2007-09-07 13:33 ` Christopher J. PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: dwalsh @ 2007-08-02 21:00 UTC (permalink / raw)
To: cpebenito; +Cc: selinux
Audit entropy needs dav_override and read/write random device
--- nsaserefpolicy/policy/modules/services/audioentropy.te 2007-05-29 14:10:57.000000000 -0400
+++ serefpolicy-3.0.5/policy/modules/services/audioentropy.te 2007-08-02 11:02:02.000000000 -0400
@@ -18,7 +18,7 @@
# Local policy
#
-allow entropyd_t self:capability { ipc_lock sys_admin };
+allow entropyd_t self:capability { dac_override ipc_lock sys_admin };
dontaudit entropyd_t self:capability sys_tty_config;
allow entropyd_t self:process signal_perms;
@@ -32,6 +32,8 @@
dev_read_sysfs(entropyd_t)
dev_read_urand(entropyd_t)
dev_write_urand(entropyd_t)
+dev_read_rand(entropyd_t)
+dev_write_rand(entropyd_t)
dev_read_sound(entropyd_t)
fs_getattr_all_fs(entropyd_t)
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread* Re: [PATCH] refpolicy: services_audioentropy changes
2007-08-02 21:00 [PATCH] refpolicy: services_audioentropy changes dwalsh
@ 2007-09-07 13:33 ` Christopher J. PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2007-09-07 13:33 UTC (permalink / raw)
To: dwalsh; +Cc: selinux
On Thu, 2007-08-02 at 17:00 -0400, dwalsh@redhat.com wrote:
> Audit entropy needs dav_override and read/write random device
Merged.
> --- nsaserefpolicy/policy/modules/services/audioentropy.te 2007-05-29 14:10:57.000000000 -0400
> +++ serefpolicy-3.0.5/policy/modules/services/audioentropy.te 2007-08-02 11:02:02.000000000 -0400
> @@ -18,7 +18,7 @@
> # Local policy
> #
>
> -allow entropyd_t self:capability { ipc_lock sys_admin };
> +allow entropyd_t self:capability { dac_override ipc_lock sys_admin };
> dontaudit entropyd_t self:capability sys_tty_config;
> allow entropyd_t self:process signal_perms;
>
> @@ -32,6 +32,8 @@
> dev_read_sysfs(entropyd_t)
> dev_read_urand(entropyd_t)
> dev_write_urand(entropyd_t)
> +dev_read_rand(entropyd_t)
> +dev_write_rand(entropyd_t)
> dev_read_sound(entropyd_t)
>
> fs_getattr_all_fs(entropyd_t)
>
>
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2007-09-07 13:34 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2007-08-02 21:00 [PATCH] refpolicy: services_audioentropy changes dwalsh
2007-09-07 13:33 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.