* Re: modutils needs to talk to terminal [not found] <200703081438.l28EcJTr008890@localhost.localdomain> @ 2007-03-09 13:10 ` Christopher J. PeBenito 2007-03-09 14:22 ` Daniel J Walsh 0 siblings, 1 reply; 4+ messages in thread From: Christopher J. PeBenito @ 2007-03-09 13:10 UTC (permalink / raw) To: dwalsh; +Cc: SE Linux On Thu, 2007-03-08 at 09:38 -0500, dwalsh@redhat.com wrote: > --- nsaserefpolicy/policy/modules/system/modutils.te 2007-02-19 11:32:53.000000000 -0500 > +++ serefpolicy-2.5.8/policy/modules/system/modutils.te 2007-03-08 09:34:35.000000000 -0500 > @@ -118,7 +118,8 @@ > } > > ifdef(`targeted_policy',` > + term_use_unallocated_ttys(insmod_t) > unconfined_domain(insmod_t) > ') With the recent fixes to the terminal module, making ttys and ptys device nodes, this shouldn't be needed. -- Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: modutils needs to talk to terminal 2007-03-09 13:10 ` modutils needs to talk to terminal Christopher J. PeBenito @ 2007-03-09 14:22 ` Daniel J Walsh 2007-03-09 15:00 ` Christopher J. PeBenito 0 siblings, 1 reply; 4+ messages in thread From: Daniel J Walsh @ 2007-03-09 14:22 UTC (permalink / raw) To: Christopher J. PeBenito; +Cc: SE Linux Christopher J. PeBenito wrote: > On Thu, 2007-03-08 at 09:38 -0500, dwalsh@redhat.com wrote: > >> --- nsaserefpolicy/policy/modules/system/modutils.te 2007-02-19 11:32:53.000000000 -0500 >> +++ serefpolicy-2.5.8/policy/modules/system/modutils.te 2007-03-08 09:34:35.000000000 -0500 >> @@ -118,7 +118,8 @@ >> } >> >> ifdef(`targeted_policy',` >> + term_use_unallocated_ttys(insmod_t) >> unconfined_domain(insmod_t) >> ') >> > > With the recent fixes to the terminal module, making ttys and ptys > device nodes, this shouldn't be needed. > > So are you saying all term_use_unallocated_ttys can go away? -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: modutils needs to talk to terminal 2007-03-09 14:22 ` Daniel J Walsh @ 2007-03-09 15:00 ` Christopher J. PeBenito 2007-03-09 15:06 ` Daniel J Walsh 0 siblings, 1 reply; 4+ messages in thread From: Christopher J. PeBenito @ 2007-03-09 15:00 UTC (permalink / raw) To: Daniel J Walsh; +Cc: SE Linux On Fri, 2007-03-09 at 09:22 -0500, Daniel J Walsh wrote: > Christopher J. PeBenito wrote: > > On Thu, 2007-03-08 at 09:38 -0500, dwalsh@redhat.com wrote: > > > >> --- nsaserefpolicy/policy/modules/system/modutils.te 2007-02-19 11:32:53.000000000 -0500 > >> +++ serefpolicy-2.5.8/policy/modules/system/modutils.te 2007-03-08 09:34:35.000000000 -0500 > >> @@ -118,7 +118,8 @@ > >> } > >> > >> ifdef(`targeted_policy',` > >> + term_use_unallocated_ttys(insmod_t) > >> unconfined_domain(insmod_t) > >> ') > >> > > > > With the recent fixes to the terminal module, making ttys and ptys > > device nodes, this shouldn't be needed. > > > > > So are you saying all term_use_unallocated_ttys can go away? I'm only saying its not needed in this case, since insmod is unconfined. -- Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: modutils needs to talk to terminal 2007-03-09 15:00 ` Christopher J. PeBenito @ 2007-03-09 15:06 ` Daniel J Walsh 0 siblings, 0 replies; 4+ messages in thread From: Daniel J Walsh @ 2007-03-09 15:06 UTC (permalink / raw) To: Christopher J. PeBenito; +Cc: SE Linux Christopher J. PeBenito wrote: > On Fri, 2007-03-09 at 09:22 -0500, Daniel J Walsh wrote: > >> Christopher J. PeBenito wrote: >> >>> On Thu, 2007-03-08 at 09:38 -0500, dwalsh@redhat.com wrote: >>> >>> >>>> --- nsaserefpolicy/policy/modules/system/modutils.te 2007-02-19 11:32:53.000000000 -0500 >>>> +++ serefpolicy-2.5.8/policy/modules/system/modutils.te 2007-03-08 09:34:35.000000000 -0500 >>>> @@ -118,7 +118,8 @@ >>>> } >>>> >>>> ifdef(`targeted_policy',` >>>> + term_use_unallocated_ttys(insmod_t) >>>> unconfined_domain(insmod_t) >>>> ') >>>> >>>> >>> With the recent fixes to the terminal module, making ttys and ptys >>> device nodes, this shouldn't be needed. >>> >>> >>> >> So are you saying all term_use_unallocated_ttys can go away? >> > > I'm only saying its not needed in this case, since insmod is unconfined. > > Ok, that is something I want to remove also. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2007-03-09 15:07 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
[not found] <200703081438.l28EcJTr008890@localhost.localdomain>
2007-03-09 13:10 ` modutils needs to talk to terminal Christopher J. PeBenito
2007-03-09 14:22 ` Daniel J Walsh
2007-03-09 15:00 ` Christopher J. PeBenito
2007-03-09 15:06 ` Daniel J Walsh
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.