Re: [PATCH] selinuxfs to globally disable dontaudit rules

[Daniel J Walsh <dwalsh@redhat.com>]

Joshua Brindle wrote:
> Daniel J Walsh wrote:
>> I would like to get these patches into policycoreutils.
>>
>>
>> Submitted before, but here we go.
>>
>> Change run_tty and open_init_pty to 755 instead of 555.  Some audit 
>> tools are reporting this as a problem.  And I see no real value of 
>> 555. for these to.
>>
>> Simple bugfix for chcat
>>
>> Fixes to make sure fixfiles reports errors and handles strange regexes.
>>
>> Speed enhancement for genhomedircon to only compile regex's once.
>>
> The current plan is to change to a genhomedircon based on C in 
> libsemanage. Have you looked at those patches to see if they suffer 
> the same problem you are fixing here?
No.
>
>>
>> I reverted sepolgen-ifgen from sbin to bin, but I doubt many/anyone 
>> will run it as non root, but I guess you never no.
>
>


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.