* Re: dev_delete to be used by lvm tools
[not found] <200702261953.l1QJrc8v031897@localhost.localdomain>
@ 2007-03-06 14:17 ` Christopher J. PeBenito
2007-03-06 15:08 ` Daniel J Walsh
0 siblings, 1 reply; 2+ messages in thread
From: Christopher J. PeBenito @ 2007-03-06 14:17 UTC (permalink / raw)
To: dwalsh; +Cc: selinux
On Mon, 2007-02-26 at 14:53 -0500, dwalsh@localhost.localdomain wrote:
dev_delete_generic_dirs() already exists.
> ===File /tmp/patches/nsaserefpolicy_policy_modules_kernel_devices.if===
> --- nsaserefpolicy/policy/modules/kernel/devices.if 2007-01-02 12:57:13.000000000 -0500
> +++ serefpolicy-2.5.5/policy/modules/kernel/devices.if 2007-02-26 11:04:23.000000000 -0500
> @@ -3173,3 +3173,21 @@
>
> typeattribute $1 devices_unconfined_type;
> ')
> +
> +########################################
> +## <summary>
> +## delete entries from directories in /dev.
> +## </summary>
> +## <param name="domain">
> +## <summary>
> +## Domain allowed to delete entries.
> +## </summary>
> +## </param>
> +#
> +interface(`dev_delete',`
> + gen_require(`
> + type device_t;
> + ')
> +
> + allow $1 device_t:dir delete_dir_perms;
> +')
> ============================================================
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread* Re: dev_delete to be used by lvm tools
2007-03-06 14:17 ` dev_delete to be used by lvm tools Christopher J. PeBenito
@ 2007-03-06 15:08 ` Daniel J Walsh
0 siblings, 0 replies; 2+ messages in thread
From: Daniel J Walsh @ 2007-03-06 15:08 UTC (permalink / raw)
To: Christopher J. PeBenito; +Cc: selinux
Christopher J. PeBenito wrote:
> On Mon, 2007-02-26 at 14:53 -0500, dwalsh@localhost.localdomain wrote:
>
> dev_delete_generic_dirs() already exists.
>
>
>> ===File /tmp/patches/nsaserefpolicy_policy_modules_kernel_devices.if===
>> --- nsaserefpolicy/policy/modules/kernel/devices.if 2007-01-02 12:57:13.000000000 -0500
>> +++ serefpolicy-2.5.5/policy/modules/kernel/devices.if 2007-02-26 11:04:23.000000000 -0500
>> @@ -3173,3 +3173,21 @@
>>
>> typeattribute $1 devices_unconfined_type;
>> ')
>> +
>> +########################################
>> +## <summary>
>> +## delete entries from directories in /dev.
>> +## </summary>
>> +## <param name="domain">
>> +## <summary>
>> +## Domain allowed to delete entries.
>> +## </summary>
>> +## </param>
>> +#
>> +interface(`dev_delete',`
>> + gen_require(`
>> + type device_t;
>> + ')
>> +
>> + allow $1 device_t:dir delete_dir_perms;
>> +')
>> ============================================================
>>
Ok, I will adjust.
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2007-03-06 15:14 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
[not found] <200702261953.l1QJrc8v031897@localhost.localdomain>
2007-03-06 14:17 ` dev_delete to be used by lvm tools Christopher J. PeBenito
2007-03-06 15:08 ` Daniel J Walsh
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.