* automount policy
@ 2004-09-01 2:38 Russell Coker
2004-09-01 3:34 ` Joshua Brindle
0 siblings, 1 reply; 5+ messages in thread
From: Russell Coker @ 2004-09-01 2:38 UTC (permalink / raw)
To: SE-Linux; +Cc: Daniel J Walsh
[-- Attachment #1: Type: text/plain, Size: 317 bytes --]
The attached patch is needed for the latest rawhide automount.
--
http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/ Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/ My home page
[-- Attachment #2: automount.diff --]
[-- Type: text/x-diff, Size: 389 bytes --]
--- /usr/src/se/policy/domains/program/unused/automount.te 2004-08-28 12:05:01.000000000 +1000
+++ domains/program/unused/automount.te 2004-09-01 12:36:44.000000000 +1000
@@ -66,4 +66,4 @@
allow automount_t home_root_t:dir { getattr };
allow automount_t mnt_t:dir { getattr search };
-allow initrc_t automount_etc_t:file getattr;
+allow initrc_t automount_etc_t:file { getattr read };
^ permalink raw reply [flat|nested] 5+ messages in thread* Re: automount policy 2004-09-01 2:38 automount policy Russell Coker @ 2004-09-01 3:34 ` Joshua Brindle 2004-09-01 8:22 ` Russell Coker 2004-09-01 9:03 ` Luke Kenneth Casson Leighton 0 siblings, 2 replies; 5+ messages in thread From: Joshua Brindle @ 2004-09-01 3:34 UTC (permalink / raw) To: russell; +Cc: SE-Linux, Daniel J Walsh Russell Coker wrote: >The attached patch is needed for the latest rawhide automount. > > > >------------------------------------------------------------------------ > >--- /usr/src/se/policy/domains/program/unused/automount.te 2004-08-28 12:05:01.000000000 +1000 >+++ domains/program/unused/automount.te 2004-09-01 12:36:44.000000000 +1000 >@@ -66,4 +66,4 @@ > allow automount_t home_root_t:dir { getattr }; > allow automount_t mnt_t:dir { getattr search }; > >-allow initrc_t automount_etc_t:file getattr; >+allow initrc_t automount_etc_t:file { getattr read }; > > Why add this allow for everyone if it's just for rawhide? Joshua Brindle Hardened Gentoo -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: automount policy 2004-09-01 3:34 ` Joshua Brindle @ 2004-09-01 8:22 ` Russell Coker 2004-09-01 12:02 ` Joshua Brindle 2004-09-01 9:03 ` Luke Kenneth Casson Leighton 1 sibling, 1 reply; 5+ messages in thread From: Russell Coker @ 2004-09-01 8:22 UTC (permalink / raw) To: Joshua Brindle; +Cc: SE-Linux, Daniel J Walsh On Wed, 1 Sep 2004 13:34, Joshua Brindle <method@gentoo.org> wrote: > >-allow initrc_t automount_etc_t:file getattr; > >+allow initrc_t automount_etc_t:file { getattr read }; > > Why add this allow for everyone if it's just for rawhide? It appears to also be necessary for Debian. If Gentoo is different then we could have ifdef(`distro_gentoo', `', ` before it. -- http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark http://www.coker.com.au/postal/ Postal SMTP/POP benchmark http://www.coker.com.au/~russell/ My home page -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: automount policy 2004-09-01 8:22 ` Russell Coker @ 2004-09-01 12:02 ` Joshua Brindle 0 siblings, 0 replies; 5+ messages in thread From: Joshua Brindle @ 2004-09-01 12:02 UTC (permalink / raw) To: russell; +Cc: SE-Linux, Daniel J Walsh Russell Coker wrote: >On Wed, 1 Sep 2004 13:34, Joshua Brindle <method@gentoo.org> wrote: > > >>>-allow initrc_t automount_etc_t:file getattr; >>>+allow initrc_t automount_etc_t:file { getattr read }; >>> >>> >>Why add this allow for everyone if it's just for rawhide? >> >> > >It appears to also be necessary for Debian. If Gentoo is different then we >could have ifdef(`distro_gentoo', `', ` before it. > > > alright, fair enough. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: automount policy 2004-09-01 3:34 ` Joshua Brindle 2004-09-01 8:22 ` Russell Coker @ 2004-09-01 9:03 ` Luke Kenneth Casson Leighton 1 sibling, 0 replies; 5+ messages in thread From: Luke Kenneth Casson Leighton @ 2004-09-01 9:03 UTC (permalink / raw) To: Joshua Brindle; +Cc: russell, SE-Linux, Daniel J Walsh On Tue, Aug 31, 2004 at 11:34:21PM -0400, Joshua Brindle wrote: > Russell Coker wrote: > > >The attached patch is needed for the latest rawhide automount. > > > > > > > >------------------------------------------------------------------------ > > > >--- /usr/src/se/policy/domains/program/unused/automount.te 2004-08-28 > >12:05:01.000000000 +1000 > >+++ domains/program/unused/automount.te 2004-09-01 > >12:36:44.000000000 +1000 > >@@ -66,4 +66,4 @@ > >allow automount_t home_root_t:dir { getattr }; > >allow automount_t mnt_t:dir { getattr search }; > > > >-allow initrc_t automount_etc_t:file getattr; > >+allow initrc_t automount_etc_t:file { getattr read }; > > > > > Why add this allow for everyone if it's just for rawhide? hey, i recognise that patch. sort-of. it's not just rawhide. i recently added automount to my debian system, and decided it would be best (for me) to add a type autmount_etc_t for /etc/auto.[usb,misc,net]. it looks like rawhide's picked it up. i only sent the patch adding automount_etc_t on last week! btw i seem to have missed /etc/auto.master from my patch [making it automount_etc_t], which might, if added, mean that allow automount_t etc_t:file { getattr read } can be _removed_. worth a try. also btw guys i thoroughly recommend the approach of doing modifications to usb-mount which put stuff into /etc/auto.usb instead of having this utterly ridiculous requirement of "warning warning please run unmount before removing the usb disk you might lose data otherwise" _no_ sane non-technical user is ever going to bother with "unmount" it makes them think of wild beasts which is going to put them off. modified usb-mount at http://hands.com/~lkcl/usb-mount in case you're interested [it's a bit hacked up so i could use some help with the use of sed and awk] l. -- -- Truth, honesty and respect are rare commodities that all spring from the same well: Love. If you love yourself and everyone and everything around you, funnily and coincidentally enough, life gets a lot better. -- <a href="http://lkcl.net"> lkcl.net </a> <br /> <a href="mailto:lkcl@lkcl.net"> lkcl@lkcl.net </a> <br /> -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2004-09-01 12:02 UTC | newest] Thread overview: 5+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2004-09-01 2:38 automount policy Russell Coker 2004-09-01 3:34 ` Joshua Brindle 2004-09-01 8:22 ` Russell Coker 2004-09-01 12:02 ` Joshua Brindle 2004-09-01 9:03 ` Luke Kenneth Casson Leighton
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.