* sasl authd uses kerberos
@ 2007-03-23 19:44 Daniel J Walsh
2007-04-11 17:51 ` Christopher J. PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Daniel J Walsh @ 2007-03-23 19:44 UTC (permalink / raw)
To: Christopher J. PeBenito, SE Linux
[-- Attachment #1: Type: text/plain, Size: 1 bytes --]
[-- Attachment #2: sasl.patch --]
[-- Type: text/x-patch, Size: 1106 bytes --]
--- nsaserefpolicy/policy/modules/services/sasl.te 2007-03-20 23:38:13.000000000 -0400
+++ serefpolicy-2.5.10/policy/modules/services/sasl.te 2007-03-22 15:06:59.000000000 -0400
@@ -10,6 +10,9 @@
type saslauthd_exec_t;
init_daemon_domain(saslauthd_t,saslauthd_exec_t)
+type saslauthd_tmp_t;
+files_tmp_file(saslauthd_tmp_t)
+
type saslauthd_var_run_t;
files_pid_file(saslauthd_var_run_t)
@@ -26,6 +29,10 @@
allow saslauthd_t self:unix_stream_socket create_stream_socket_perms;
allow saslauthd_t self:tcp_socket create_socket_perms;
+manage_files_pattern(saslauthd_t,saslauthd_tmp_t,saslauthd_tmp_t)
+allow saslauthd_t saslauthd_tmp_t:dir setattr;
+files_tmp_filetrans(saslauthd_t,saslauthd_tmp_t,file)
+
manage_files_pattern(saslauthd_t,saslauthd_var_run_t,saslauthd_var_run_t)
manage_sock_files_pattern(saslauthd_t,saslauthd_var_run_t,saslauthd_var_run_t)
files_pid_filetrans(saslauthd_t,saslauthd_var_run_t,file)
@@ -89,6 +96,10 @@
')
optional_policy(`
+ kerberos_read_keytab(saslauthd_t)
+')
+
+optional_policy(`
mysql_search_db(saslauthd_t)
mysql_stream_connect(saslauthd_t)
')
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: sasl authd uses kerberos
2007-03-23 19:44 sasl authd uses kerberos Daniel J Walsh
@ 2007-04-11 17:51 ` Christopher J. PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2007-04-11 17:51 UTC (permalink / raw)
To: Daniel J Walsh; +Cc: SE Linux
On Fri, 2007-03-23 at 15:44 -0400, Daniel J Walsh wrote:
> --- nsaserefpolicy/policy/modules/services/sasl.te 2007-03-20 23:38:13.000000000 -0400
> +++ serefpolicy-2.5.10/policy/modules/services/sasl.te 2007-03-22 15:06:59.000000000 -0400
> @@ -10,6 +10,9 @@
> type saslauthd_exec_t;
> init_daemon_domain(saslauthd_t,saslauthd_exec_t)
>
> +type saslauthd_tmp_t;
> +files_tmp_file(saslauthd_tmp_t)
> +
> type saslauthd_var_run_t;
> files_pid_file(saslauthd_var_run_t)
>
> @@ -26,6 +29,10 @@
> allow saslauthd_t self:unix_stream_socket create_stream_socket_perms;
> allow saslauthd_t self:tcp_socket create_socket_perms;
>
> +manage_files_pattern(saslauthd_t,saslauthd_tmp_t,saslauthd_tmp_t)
> +allow saslauthd_t saslauthd_tmp_t:dir setattr;
> +files_tmp_filetrans(saslauthd_t,saslauthd_tmp_t,file)
> +
> manage_files_pattern(saslauthd_t,saslauthd_var_run_t,saslauthd_var_run_t)
> manage_sock_files_pattern(saslauthd_t,saslauthd_var_run_t,saslauthd_var_run_t)
> files_pid_filetrans(saslauthd_t,saslauthd_var_run_t,file)
> @@ -89,6 +96,10 @@
> ')
>
> optional_policy(`
> + kerberos_read_keytab(saslauthd_t)
> +')
> +
> +optional_policy(`
> mysql_search_db(saslauthd_t)
> mysql_stream_connect(saslauthd_t)
> ')
Merged.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2007-04-11 17:51 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2007-03-23 19:44 sasl authd uses kerberos Daniel J Walsh
2007-04-11 17:51 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.