* Any idea why /proc/mtrr is marked as mtrr_device_t?
@ 2006-08-01 13:19 Daniel J Walsh
2006-08-01 13:28 ` Stephen Smalley
0 siblings, 1 reply; 5+ messages in thread
From: Daniel J Walsh @ 2006-08-01 13:19 UTC (permalink / raw)
To: Stephen Smalley, Eric Paris, James Morris, SE Linux
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: Any idea why /proc/mtrr is marked as mtrr_device_t?
2006-08-01 13:19 Any idea why /proc/mtrr is marked as mtrr_device_t? Daniel J Walsh
@ 2006-08-01 13:28 ` Stephen Smalley
2006-08-01 13:42 ` Daniel J Walsh
0 siblings, 1 reply; 5+ messages in thread
From: Stephen Smalley @ 2006-08-01 13:28 UTC (permalink / raw)
To: Daniel J Walsh; +Cc: Eric Paris, James Morris, SE Linux
See Documentation/mtrr.txt in the kernel tree.
--
Stephen Smalley
National Security Agency
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: Any idea why /proc/mtrr is marked as mtrr_device_t?
2006-08-01 13:28 ` Stephen Smalley
@ 2006-08-01 13:42 ` Daniel J Walsh
2006-08-01 13:54 ` Stephen Smalley
0 siblings, 1 reply; 5+ messages in thread
From: Daniel J Walsh @ 2006-08-01 13:42 UTC (permalink / raw)
To: Stephen Smalley; +Cc: Eric Paris, James Morris, SE Linux
Stephen Smalley wrote:
> See Documentation/mtrr.txt in the kernel tree.
>
>
So labeling a file as a device_t is ok?
In strict policy xserver wants to write to it
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: Any idea why /proc/mtrr is marked as mtrr_device_t?
2006-08-01 13:42 ` Daniel J Walsh
@ 2006-08-01 13:54 ` Stephen Smalley
2006-08-01 14:01 ` Christopher J. PeBenito
0 siblings, 1 reply; 5+ messages in thread
From: Stephen Smalley @ 2006-08-01 13:54 UTC (permalink / raw)
To: Daniel J Walsh; +Cc: Eric Paris, James Morris, SE Linux
On Tue, 2006-08-01 at 09:42 -0400, Daniel J Walsh wrote:
> Stephen Smalley wrote:
> > See Documentation/mtrr.txt in the kernel tree.
> >
> >
> So labeling a file as a device_t is ok?
>
> In strict policy xserver wants to write to it
Yes, X needs access to it, and that rule existed in the old example
policy. Does refpolicy lack it?
--
Stephen Smalley
National Security Agency
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: Any idea why /proc/mtrr is marked as mtrr_device_t?
2006-08-01 13:54 ` Stephen Smalley
@ 2006-08-01 14:01 ` Christopher J. PeBenito
0 siblings, 0 replies; 5+ messages in thread
From: Christopher J. PeBenito @ 2006-08-01 14:01 UTC (permalink / raw)
To: Stephen Smalley; +Cc: Daniel J Walsh, Eric Paris, James Morris, SE Linux
On Tue, 2006-08-01 at 09:54 -0400, Stephen Smalley wrote:
> On Tue, 2006-08-01 at 09:42 -0400, Daniel J Walsh wrote:
> > Stephen Smalley wrote:
> > > See Documentation/mtrr.txt in the kernel tree.
> > >
> > >
> > So labeling a file as a device_t is ok?
> >
> > In strict policy xserver wants to write to it
>
> Yes, X needs access to it, and that rule existed in the old example
> policy. Does refpolicy lack it?
Looks like a bug in the interface. Xserver has dev_rw_mtrr(), but the
interface had mtrr_device_t:chr_file perms but was missing access for
the file class.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2006-08-01 14:01 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-08-01 13:19 Any idea why /proc/mtrr is marked as mtrr_device_t? Daniel J Walsh
2006-08-01 13:28 ` Stephen Smalley
2006-08-01 13:42 ` Daniel J Walsh
2006-08-01 13:54 ` Stephen Smalley
2006-08-01 14:01 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.