Re: cvs and mta

[Junji Kanemaru <linux@linuon.com>]

Daniel J Walsh wrote:
> Does adding the line
> 
> typeattribute cvs_t privmail;
> 
> help?

It helped. It reduced the "allow" lines about hlaf.
I still needed have followings:

allow cvs_t bin_t:dir search;
allow cvs_t bin_t:file { execute execute_no_trans getattr read };
allow cvs_t bin_t:lnk_file read;
allow cvs_t default_t:dir search;
allow cvs_t default_t:lnk_file read;
allow cvs_t devtty_t:chr_file { read write };
allow cvs_t etc_runtime_t:file { getattr read };
allow cvs_t sbin_t:dir search;
allow cvs_t sbin_t:lnk_file read;
allow cvs_t shadow_t:file read;
allow cvs_t shell_exec_t:file { execute execute_no_trans getattr read };
allow system_mail_t cvs_data_t:file read;

Is there any simple way do above?

Thanks,

-- Junji

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.