* networkmanager now setpgid
@ 2007-03-23 19:50 Daniel J Walsh
2007-04-10 13:06 ` Christopher J. PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Daniel J Walsh @ 2007-03-23 19:50 UTC (permalink / raw)
To: Christopher J. PeBenito, SE Linux
[-- Attachment #1: Type: text/plain, Size: 1 bytes --]
[-- Attachment #2: networkmanager.patch --]
[-- Type: text/x-patch, Size: 856 bytes --]
--- nsaserefpolicy/policy/modules/services/networkmanager.te 2007-03-20 23:38:16.000000000 -0400
+++ serefpolicy-2.5.10/policy/modules/services/networkmanager.te 2007-03-22 15:06:59.000000000 -0400
@@ -22,7 +22,7 @@
# and it receives a unexpected signal (rh bug #204161)
allow NetworkManager_t self:capability { kill setgid setuid sys_nice dac_override net_admin net_raw net_bind_service ipc_lock };
dontaudit NetworkManager_t self:capability { sys_tty_config sys_ptrace };
-allow NetworkManager_t self:process { ptrace setcap getsched signal_perms };
+allow NetworkManager_t self:process { ptrace setcap setpgid getsched signal_perms };
allow NetworkManager_t self:fifo_file rw_fifo_file_perms;
allow NetworkManager_t self:unix_dgram_socket { sendto create_socket_perms };
allow NetworkManager_t self:unix_stream_socket create_stream_socket_perms;
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: networkmanager now setpgid
2007-03-23 19:50 networkmanager now setpgid Daniel J Walsh
@ 2007-04-10 13:06 ` Christopher J. PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2007-04-10 13:06 UTC (permalink / raw)
To: Daniel J Walsh; +Cc: SE Linux
On Fri, 2007-03-23 at 15:50 -0400, Daniel J Walsh wrote:
> --- nsaserefpolicy/policy/modules/services/networkmanager.te 2007-03-20 23:38:16.000000000 -0400
> +++ serefpolicy-2.5.10/policy/modules/services/networkmanager.te 2007-03-22 15:06:59.000000000 -0400
> @@ -22,7 +22,7 @@
> # and it receives a unexpected signal (rh bug #204161)
> allow NetworkManager_t self:capability { kill setgid setuid sys_nice dac_override net_admin net_raw net_bind_service ipc_lock };
> dontaudit NetworkManager_t self:capability { sys_tty_config sys_ptrace };
> -allow NetworkManager_t self:process { ptrace setcap getsched signal_perms };
> +allow NetworkManager_t self:process { ptrace setcap setpgid getsched signal_perms };
> allow NetworkManager_t self:fifo_file rw_fifo_file_perms;
> allow NetworkManager_t self:unix_dgram_socket { sendto create_socket_perms };
> allow NetworkManager_t self:unix_stream_socket create_stream_socket_perms;
Merged.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2007-04-10 13:06 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2007-03-23 19:50 networkmanager now setpgid Daniel J Walsh
2007-04-10 13:06 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.