Re: patch for ssh-agent

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

On Tue, Aug 24, 2004 at 07:21:41AM -0400, Stephen Smalley wrote:
> On Mon, 2004-08-23 at 17:59, Luke Kenneth Casson Leighton wrote:
> > absolutely clueless as to what this is for, but at least it gets
> > rid of the audit warnings, which were bugging me.
> 
> libselinux constructors try to:
> - determine where selinuxfs is mounted via /proc/self/mounts for future
> use in libselinux calls that act on selinuxfs,
> - determine where the "active" policy is located via /etc/selinux/config
> for future use in libselinux calls that act on policy files.
> 
> As a result, anything that links with libselinux will trigger these
> access attempts upon startup, even if the program never subsequently
> invokes any libselinux calls that would act on selinuxfs or a policy
> file.  If you know the program isn't using such calls, then you can just
> dontaudit these rules.
 
 oo.  okay.
 
 well, i added dontaudit for ssh-agent and well it seems to be okay.

 l.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.