Re: [PATCH] selinuxfs to globally disable dontaudit rules

[Joshua Brindle <method@manicmethod.com>]

Daniel J Walsh wrote:
> I would like to get these patches into policycoreutils.
>
>
> Submitted before, but here we go.
>
> Change run_tty and open_init_pty to 755 instead of 555.  Some audit 
> tools are reporting this as a problem.  And I see no real value of 
> 555. for these to.
>
> Simple bugfix for chcat
>
> Fixes to make sure fixfiles reports errors and handles strange regexes.
>
> Speed enhancement for genhomedircon to only compile regex's once.
>
The current plan is to change to a genhomedircon based on C in 
libsemanage. Have you looked at those patches to see if they suffer the 
same problem you are fixing here?

>
> I reverted sepolgen-ifgen from sbin to bin, but I doubt many/anyone 
> will run it as non root, but I guess you never no.



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.