* clamd wants to read kernerl sysctls.
@ 2007-02-20 17:24 Daniel J Walsh
2007-02-23 19:20 ` Christopher J. PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Daniel J Walsh @ 2007-02-20 17:24 UTC (permalink / raw)
To: Christopher J. PeBenito, SE Linux
[-- Attachment #1: Type: text/plain, Size: 1 bytes --]
[-- Attachment #2: nsaserefpolicy_policy_modules_services_clamav.patch --]
[-- Type: text/x-patch, Size: 414 bytes --]
--- nsaserefpolicy/policy/modules/services/clamav.te 2007-01-02 12:57:43.000000000 -0500
+++ serefpolicy-2.5.4/policy/modules/services/clamav.te 2007-02-19 16:01:52.000000000 -0500
@@ -86,6 +86,8 @@
kernel_dontaudit_list_proc(clamd_t)
kernel_read_sysctl(clamd_t)
+kernel_read_sysctl(clamd_t)
+
corenet_non_ipsec_sendrecv(clamd_t)
corenet_tcp_sendrecv_all_if(clamd_t)
corenet_tcp_sendrecv_all_nodes(clamd_t)
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: clamd wants to read kernerl sysctls.
2007-02-20 17:24 clamd wants to read kernerl sysctls Daniel J Walsh
@ 2007-02-23 19:20 ` Christopher J. PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2007-02-23 19:20 UTC (permalink / raw)
To: Daniel J Walsh; +Cc: SE Linux
On Tue, 2007-02-20 at 12:24 -0500, Daniel J Walsh wrote:
> --- nsaserefpolicy/policy/modules/services/clamav.te 2007-01-02 12:57:43.000000000 -0500
> +++ serefpolicy-2.5.4/policy/modules/services/clamav.te 2007-02-19 16:01:52.000000000 -0500
> @@ -86,6 +86,8 @@
> kernel_dontaudit_list_proc(clamd_t)
> kernel_read_sysctl(clamd_t)
>
> +kernel_read_sysctl(clamd_t)
> +
> corenet_non_ipsec_sendrecv(clamd_t)
> corenet_tcp_sendrecv_all_if(clamd_t)
> corenet_tcp_sendrecv_all_nodes(clamd_t)
Its there already.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2007-02-23 19:18 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2007-02-20 17:24 clamd wants to read kernerl sysctls Daniel J Walsh
2007-02-23 19:20 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.