* Ok, I know this has been asked before, but why is there an ls_exec_t?
@ 2004-11-22 20:33 Daniel J Walsh
2004-11-22 22:10 ` Russell Coker
0 siblings, 1 reply; 2+ messages in thread
From: Daniel J Walsh @ 2004-11-22 20:33 UTC (permalink / raw)
To: SELinux, Russell Coker, Stephen Smalley
Is there really a good reason for hostname_exec_t?
Dan
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Ok, I know this has been asked before, but why is there an ls_exec_t?
2004-11-22 20:33 Ok, I know this has been asked before, but why is there an ls_exec_t? Daniel J Walsh
@ 2004-11-22 22:10 ` Russell Coker
0 siblings, 0 replies; 2+ messages in thread
From: Russell Coker @ 2004-11-22 22:10 UTC (permalink / raw)
To: Daniel J Walsh; +Cc: SE Linux list, Stephen Smalley
ls_exec_t is for ftpd. But as ftp servers seem to either be moving in
the direction of minimal functionality and ls being built in or of
maximum functionality which includes automatically running tar and gzip
it seems that this isn't providing much benefit.
On Mon, 2004-11-22 at 15:33 -0500, Daniel J Walsh wrote:
> Is there really a good reason for hostname_exec_t?
Yes, it means that we can reduce the access granted to initrc_t. But if
you have unlimitedRC then it provides no benefit.
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2004-11-22 22:10 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-11-22 20:33 Ok, I know this has been asked before, but why is there an ls_exec_t? Daniel J Walsh
2004-11-22 22:10 ` Russell Coker
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.