From: david@hardeman.nu
To: selinux@tycho.nsa.gov
Cc: dwalsh@redhat.com, cpebenito@tresys.com
Subject: [refpolicy-patch 02/23] anaconda policy update
Date: Sat, 19 Jul 2008 22:50:04 +0200 [thread overview]
Message-ID: <20080719210251.406319184@hardeman.nu> (raw)
In-Reply-To: 20080719205002.462190042@hardeman.nu
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 1192 bytes --]
Anaconda is a RH installation program, RH should know their own program and
the changes are quite trivial
diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/anaconda.te serefpolicy-3.5.0/policy/modules/admin/anaconda.te
--- nsaserefpolicy/policy/modules/admin/anaconda.te 2008-07-10 11:38:46.000000000 -0400
+++ serefpolicy-3.5.0/policy/modules/admin/anaconda.te 2008-07-15 14:05:12.000000000 -0400
@@ -31,16 +31,11 @@
modutils_domtrans_insmod(anaconda_t)
seutil_domtrans_semanage(anaconda_t)
-
-unconfined_domain(anaconda_t)
+seutil_domtrans_setsebool(anaconda_t)
unprivuser_home_dir_filetrans_home_content(anaconda_t,{ dir file lnk_file fifo_file sock_file })
optional_policy(`
- dmesg_domtrans(anaconda_t)
-')
-
-optional_policy(`
kudzu_domtrans(anaconda_t)
')
@@ -58,5 +53,9 @@
')
optional_policy(`
+ unconfined_domain(anaconda_t)
+')
+
+optional_policy(`
usermanage_domtrans_admin_passwd(anaconda_t)
')
--
David Härdeman
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
next prev parent reply other threads:[~2008-07-19 21:02 UTC|newest]
Thread overview: 42+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-07-19 20:50 [refpolicy-patch 00/23] Cherry-picks from Fedora SELinux patch david
2008-07-19 20:50 ` [refpolicy-patch 01/23] slocate policy update david
2008-07-19 20:50 ` david [this message]
2008-07-20 5:53 ` [refpolicy-patch 02/23] anaconda " Russell Coker
2008-07-22 10:16 ` Daniel J Walsh
2008-07-22 20:36 ` Chris PeBenito
2008-07-19 20:50 ` [refpolicy-patch 03/23] unconfined_u policy updates david
2008-07-19 20:50 ` [refpolicy-patch 04/23] kismet policy update david
2008-07-19 20:50 ` [refpolicy-patch 05/23] kudzu " david
2008-07-19 20:50 ` [refpolicy-patch 06/23] logrotate " david
2008-07-28 15:18 ` Chris PeBenito
2008-07-28 16:35 ` Daniel J Walsh
2008-07-19 20:50 ` [refpolicy-patch 07/23] corenetwork " david
2008-07-22 10:18 ` Daniel J Walsh
2008-07-19 20:50 ` [refpolicy-patch 08/23] secadm " david
2008-07-19 20:50 ` [refpolicy-patch 09/23] apm " david
2008-07-19 20:50 ` [refpolicy-patch 10/23] courier " david
2008-07-19 20:50 ` [refpolicy-patch 11/23] cpucontrol " david
2008-07-22 20:25 ` Chris PeBenito
2008-07-24 12:23 ` Daniel J Walsh
2008-07-19 20:50 ` [refpolicy-patch 12/23] openca " david
2008-07-19 20:50 ` [refpolicy-patch 13/23] portslave " david
2008-07-25 0:00 ` Chris PeBenito
2008-07-19 20:50 ` [refpolicy-patch 14/23] rhgb " david
2008-07-22 20:29 ` Chris PeBenito
2008-07-24 0:24 ` Daniel J Walsh
2008-07-24 23:44 ` Chris PeBenito
2008-07-25 1:25 ` Daniel J Walsh
2008-07-19 20:50 ` [refpolicy-patch 15/23] soundserver " david
2008-07-28 12:37 ` Chris PeBenito
2008-07-19 20:50 ` [refpolicy-patch 16/23] w3c policy addition david
2008-07-19 20:50 ` [refpolicy-patch 17/23] logging policy update david
2008-07-19 20:50 ` [refpolicy-patch 18/23] miscfiles " david
2008-07-25 12:14 ` Chris PeBenito
2008-07-19 20:50 ` [refpolicy-patch 19/23] netlabel " david
2008-07-25 12:14 ` Chris PeBenito
2008-07-19 20:50 ` [refpolicy-patch 20/23] pcmcia " david
2008-07-22 20:32 ` Chris PeBenito
2008-07-19 20:50 ` [refpolicy-patch 21/23] raid " david
2008-07-25 12:14 ` Chris PeBenito
2008-07-19 20:50 ` [refpolicy-patch 22/23] xen " david
2008-07-19 20:50 ` [refpolicy-patch 23/23] qemu " david
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20080719210251.406319184@hardeman.nu \
--to=david@hardeman.nu \
--cc=cpebenito@tresys.com \
--cc=dwalsh@redhat.com \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.