From: Russell Coker <rcoker@redhat.com>
To: SE Linux <selinux@tycho.nsa.gov>
Cc: Stephen Smalley <sds@epoch.ncsc.mil>
Subject: comment change in attrib.te
Date: Thu, 8 Jul 2004 13:26:36 +1000 [thread overview]
Message-ID: <200407081326.36713.rcoker@redhat.com> (raw)
[-- Attachment #1: Type: text/plain, Size: 308 bytes --]
I think that the attached comment change is worth having. We want to
discourage people from putting in rules that allow all domains to perform an
action such as reading a file. The current comment will tend to encourage
such actions.
--
http://apac.redhat.com/disclaimer
See above URL for disclaimer.
[-- Attachment #2: diff --]
[-- Type: text/x-diff, Size: 570 bytes --]
diff -ru /usr/src/se/policy/attrib.te ./attrib.te
--- /usr/src/se/policy/attrib.te 2004-07-08 13:09:32.000000000 +1000
+++ ./attrib.te 2004-07-08 13:23:23.000000000 +1000
@@ -41,8 +41,7 @@
# The domain attribute identifies every type that can be
# assigned to a process. This attribute is used in TE rules
# that should be applied to all domains, e.g. permitting
-# init to kill all processes or permitting all processes
-# to read a particular file.
+# init to kill all processes.
attribute domain;
# The privuser attribute identifies every domain that can
reply other threads:[~2004-07-08 3:26 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200407081326.36713.rcoker@redhat.com \
--to=rcoker@redhat.com \
--cc=sds@epoch.ncsc.mil \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.