Re: policy to allow upgrade of nfs-utils

[Russell Coker <russell@coker.com.au>]

On Mon, 12 Jul 2004 22:58, Stephen Smalley <sds@epoch.ncsc.mil> wrote:
> On Sun, 2004-07-11 at 05:04, Russell Coker wrote:
> > A patched version of vi should solve that.  In any case if the file gets
> > etc_t then it is just readable to everyone which isn't so bad.  The only
> > potential problem is if you edit the file with an unpatched editor and
> > delete all content so that initrc_t will want to append "#" to it.
> >
> > What do you think of the attached patch?
>
> Looks ok, but is it sufficient, i.e. does it only require permission to
> write to the existing /etc/exports, or does it need to be able to unlink
> and re-create the file?

The init script only requires append permission.  Of course other programs 
need read access which my patch didn't grant, so it's not complete in that 
regard.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.