* pegasus
@ 2005-10-22 21:45 Christopher J. PeBenito
2005-10-24 15:13 ` pegasus Daniel J Walsh
0 siblings, 1 reply; 2+ messages in thread
From: Christopher J. PeBenito @ 2005-10-22 21:45 UTC (permalink / raw)
To: SELinux Mail List
While converting the pegasus policy over to reference policy, I came
across this peculiar use types and rules:
type pegasus_conf_exec_t, file_type, exec_type, sysadmfile;
rw_dir_create_file(pegasus_conf_exec_t, pegasus_conf_t)
This is the only use of pegasus_conf_exec_t, and is obvious that it
doesn't have an effect. There is a pegasus_conf_t, but it also is a
file_type, used for the configuration files. My guess is that the
original intention was to make a domain for pegasus configuration
programs, but it went awry.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: pegasus
2005-10-22 21:45 pegasus Christopher J. PeBenito
@ 2005-10-24 15:13 ` Daniel J Walsh
0 siblings, 0 replies; 2+ messages in thread
From: Daniel J Walsh @ 2005-10-24 15:13 UTC (permalink / raw)
To: Christopher J. PeBenito; +Cc: SELinux Mail List
Christopher J. PeBenito wrote:
> While converting the pegasus policy over to reference policy, I came
> across this peculiar use types and rules:
>
> type pegasus_conf_exec_t, file_type, exec_type, sysadmfile;
>
> rw_dir_create_file(pegasus_conf_exec_t, pegasus_conf_t)
>
> This is the only use of pegasus_conf_exec_t, and is obvious that it
> doesn't have an effect. There is a pegasus_conf_t, but it also is a
> file_type, used for the configuration files. My guess is that the
> original intention was to make a domain for pegasus configuration
> programs, but it went awry.
>
>
Yes, I am going to meet with the developer of the policy and see what he
intended. For now I would eliminate them from policy.
--
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2005-10-24 15:16 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2005-10-22 21:45 pegasus Christopher J. PeBenito
2005-10-24 15:13 ` pegasus Daniel J Walsh
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.