* kudzu requests sys_ptrace, I am denying it.
@ 2007-03-23 20:12 Daniel J Walsh
2007-04-10 13:06 ` Christopher J. PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Daniel J Walsh @ 2007-03-23 20:12 UTC (permalink / raw)
To: Christopher J. PeBenito, SE Linux
[-- Attachment #1: Type: text/plain, Size: 1 bytes --]
[-- Attachment #2: kudzu.patch --]
[-- Type: text/x-patch, Size: 599 bytes --]
--- nsaserefpolicy/policy/modules/admin/kudzu.te 2007-03-20 23:38:29.000000000 -0400
+++ serefpolicy-2.5.10/policy/modules/admin/kudzu.te 2007-03-23 10:42:14.000000000 -0400
@@ -22,7 +22,7 @@
#
allow kudzu_t self:capability { dac_override sys_admin sys_rawio net_admin sys_tty_config mknod };
-dontaudit kudzu_t self:capability sys_tty_config;
+dontaudit kudzu_t self:capability { sys_ptrace sys_tty_config };
allow kudzu_t self:process { signal_perms execmem };
allow kudzu_t self:fifo_file rw_fifo_file_perms;
allow kudzu_t self:unix_stream_socket { connectto create_stream_socket_perms };
^ permalink raw reply [flat|nested] 2+ messages in thread* Re: kudzu requests sys_ptrace, I am denying it.
2007-03-23 20:12 kudzu requests sys_ptrace, I am denying it Daniel J Walsh
@ 2007-04-10 13:06 ` Christopher J. PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2007-04-10 13:06 UTC (permalink / raw)
To: Daniel J Walsh; +Cc: SE Linux
On Fri, 2007-03-23 at 16:12 -0400, Daniel J Walsh wrote:
> --- nsaserefpolicy/policy/modules/admin/kudzu.te 2007-03-20 23:38:29.000000000 -0400
> +++ serefpolicy-2.5.10/policy/modules/admin/kudzu.te 2007-03-23 10:42:14.000000000 -0400
> @@ -22,7 +22,7 @@
> #
>
> allow kudzu_t self:capability { dac_override sys_admin sys_rawio net_admin sys_tty_config mknod };
> -dontaudit kudzu_t self:capability sys_tty_config;
> +dontaudit kudzu_t self:capability { sys_ptrace sys_tty_config };
> allow kudzu_t self:process { signal_perms execmem };
> allow kudzu_t self:fifo_file rw_fifo_file_perms;
> allow kudzu_t self:unix_stream_socket { connectto create_stream_socket_perms };
Merged.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2007-04-10 13:05 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2007-03-23 20:12 kudzu requests sys_ptrace, I am denying it Daniel J Walsh
2007-04-10 13:06 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.