* ping broken symptoms
@ 2005-09-16 20:14 Christopher J. PeBenito
2005-09-16 20:17 ` Stephen Smalley
2005-09-16 20:25 ` Daniel J Walsh
0 siblings, 2 replies; 3+ messages in thread
From: Christopher J. PeBenito @ 2005-09-16 20:14 UTC (permalink / raw)
To: SELinux Mail List
At the bottom of the ping policy, there is this ifdef:
ifdef(`hide_broken_symptoms', `
allow ping_t init_t:fd use;
')
Isn't the purpose of the hide_broken_symptoms m4 tunable to dontaudit
broken code that can work without these accesses, not allow them?
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: ping broken symptoms
2005-09-16 20:14 ping broken symptoms Christopher J. PeBenito
@ 2005-09-16 20:17 ` Stephen Smalley
2005-09-16 20:25 ` Daniel J Walsh
1 sibling, 0 replies; 3+ messages in thread
From: Stephen Smalley @ 2005-09-16 20:17 UTC (permalink / raw)
To: Christopher J. PeBenito; +Cc: SELinux Mail List
On Fri, 2005-09-16 at 16:14 -0400, Christopher J. PeBenito wrote:
> At the bottom of the ping policy, there is this ifdef:
>
> ifdef(`hide_broken_symptoms', `
> allow ping_t init_t:fd use;
> ')
>
> Isn't the purpose of the hide_broken_symptoms m4 tunable to dontaudit
> broken code that can work without these accesses, not allow them?
Yes, looks like a mistake to me.
--
Stephen Smalley
National Security Agency
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: ping broken symptoms
2005-09-16 20:14 ping broken symptoms Christopher J. PeBenito
2005-09-16 20:17 ` Stephen Smalley
@ 2005-09-16 20:25 ` Daniel J Walsh
1 sibling, 0 replies; 3+ messages in thread
From: Daniel J Walsh @ 2005-09-16 20:25 UTC (permalink / raw)
To: Christopher J. PeBenito; +Cc: SELinux Mail List
Christopher J. PeBenito wrote:
>At the bottom of the ping policy, there is this ifdef:
>
>ifdef(`hide_broken_symptoms', `
>allow ping_t init_t:fd use;
>')
>
>Isn't the purpose of the hide_broken_symptoms m4 tunable to dontaudit
>broken code that can work without these accesses, not allow them?
>
>
>
yes
--
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2005-09-16 20:26 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2005-09-16 20:14 ping broken symptoms Christopher J. PeBenito
2005-09-16 20:17 ` Stephen Smalley
2005-09-16 20:25 ` Daniel J Walsh
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.