* Re: modutils needs to talk to terminal
[not found] <200703081438.l28EcJTr008890@localhost.localdomain>
@ 2007-03-09 13:10 ` Christopher J. PeBenito
2007-03-09 14:22 ` Daniel J Walsh
0 siblings, 1 reply; 4+ messages in thread
From: Christopher J. PeBenito @ 2007-03-09 13:10 UTC (permalink / raw)
To: dwalsh; +Cc: SE Linux
On Thu, 2007-03-08 at 09:38 -0500, dwalsh@redhat.com wrote:
> --- nsaserefpolicy/policy/modules/system/modutils.te 2007-02-19 11:32:53.000000000 -0500
> +++ serefpolicy-2.5.8/policy/modules/system/modutils.te 2007-03-08 09:34:35.000000000 -0500
> @@ -118,7 +118,8 @@
> }
>
> ifdef(`targeted_policy',`
> + term_use_unallocated_ttys(insmod_t)
> unconfined_domain(insmod_t)
> ')
With the recent fixes to the terminal module, making ttys and ptys
device nodes, this shouldn't be needed.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: modutils needs to talk to terminal
2007-03-09 13:10 ` modutils needs to talk to terminal Christopher J. PeBenito
@ 2007-03-09 14:22 ` Daniel J Walsh
2007-03-09 15:00 ` Christopher J. PeBenito
0 siblings, 1 reply; 4+ messages in thread
From: Daniel J Walsh @ 2007-03-09 14:22 UTC (permalink / raw)
To: Christopher J. PeBenito; +Cc: SE Linux
Christopher J. PeBenito wrote:
> On Thu, 2007-03-08 at 09:38 -0500, dwalsh@redhat.com wrote:
>
>> --- nsaserefpolicy/policy/modules/system/modutils.te 2007-02-19 11:32:53.000000000 -0500
>> +++ serefpolicy-2.5.8/policy/modules/system/modutils.te 2007-03-08 09:34:35.000000000 -0500
>> @@ -118,7 +118,8 @@
>> }
>>
>> ifdef(`targeted_policy',`
>> + term_use_unallocated_ttys(insmod_t)
>> unconfined_domain(insmod_t)
>> ')
>>
>
> With the recent fixes to the terminal module, making ttys and ptys
> device nodes, this shouldn't be needed.
>
>
So are you saying all term_use_unallocated_ttys can go away?
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: modutils needs to talk to terminal
2007-03-09 14:22 ` Daniel J Walsh
@ 2007-03-09 15:00 ` Christopher J. PeBenito
2007-03-09 15:06 ` Daniel J Walsh
0 siblings, 1 reply; 4+ messages in thread
From: Christopher J. PeBenito @ 2007-03-09 15:00 UTC (permalink / raw)
To: Daniel J Walsh; +Cc: SE Linux
On Fri, 2007-03-09 at 09:22 -0500, Daniel J Walsh wrote:
> Christopher J. PeBenito wrote:
> > On Thu, 2007-03-08 at 09:38 -0500, dwalsh@redhat.com wrote:
> >
> >> --- nsaserefpolicy/policy/modules/system/modutils.te 2007-02-19 11:32:53.000000000 -0500
> >> +++ serefpolicy-2.5.8/policy/modules/system/modutils.te 2007-03-08 09:34:35.000000000 -0500
> >> @@ -118,7 +118,8 @@
> >> }
> >>
> >> ifdef(`targeted_policy',`
> >> + term_use_unallocated_ttys(insmod_t)
> >> unconfined_domain(insmod_t)
> >> ')
> >>
> >
> > With the recent fixes to the terminal module, making ttys and ptys
> > device nodes, this shouldn't be needed.
> >
> >
> So are you saying all term_use_unallocated_ttys can go away?
I'm only saying its not needed in this case, since insmod is unconfined.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: modutils needs to talk to terminal
2007-03-09 15:00 ` Christopher J. PeBenito
@ 2007-03-09 15:06 ` Daniel J Walsh
0 siblings, 0 replies; 4+ messages in thread
From: Daniel J Walsh @ 2007-03-09 15:06 UTC (permalink / raw)
To: Christopher J. PeBenito; +Cc: SE Linux
Christopher J. PeBenito wrote:
> On Fri, 2007-03-09 at 09:22 -0500, Daniel J Walsh wrote:
>
>> Christopher J. PeBenito wrote:
>>
>>> On Thu, 2007-03-08 at 09:38 -0500, dwalsh@redhat.com wrote:
>>>
>>>
>>>> --- nsaserefpolicy/policy/modules/system/modutils.te 2007-02-19 11:32:53.000000000 -0500
>>>> +++ serefpolicy-2.5.8/policy/modules/system/modutils.te 2007-03-08 09:34:35.000000000 -0500
>>>> @@ -118,7 +118,8 @@
>>>> }
>>>>
>>>> ifdef(`targeted_policy',`
>>>> + term_use_unallocated_ttys(insmod_t)
>>>> unconfined_domain(insmod_t)
>>>> ')
>>>>
>>>>
>>> With the recent fixes to the terminal module, making ttys and ptys
>>> device nodes, this shouldn't be needed.
>>>
>>>
>>>
>> So are you saying all term_use_unallocated_ttys can go away?
>>
>
> I'm only saying its not needed in this case, since insmod is unconfined.
>
>
Ok, that is something I want to remove also.
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2007-03-09 15:07 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
[not found] <200703081438.l28EcJTr008890@localhost.localdomain>
2007-03-09 13:10 ` modutils needs to talk to terminal Christopher J. PeBenito
2007-03-09 14:22 ` Daniel J Walsh
2007-03-09 15:00 ` Christopher J. PeBenito
2007-03-09 15:06 ` Daniel J Walsh
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.