Patch to update boolean descriptions to match what I had in policycoreutils.

Patch to update boolean descriptions to match what I had in policycoreutils.

[Daniel J Walsh]

[-- Attachment #1: Type: text/plain, Size: 349 bytes --]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hopefully these descriptions are a little better.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFHWFCirlYvE4MpobMRAocGAJ9MI4PvHR94HJc9ysU8K9wdvI4riQCdEo0e
KkEa5szvv/7IJ1eanuobUN4=
=zM5y
-----END PGP SIGNATURE-----

[-- Attachment #2: diff.gz --]
[-- Type: application/x-gzip, Size: 2668 bytes --]

[-- Attachment #3: diff.gz.sig --]
[-- Type: application/octet-stream, Size: 65 bytes --]

Re: Patch to update boolean descriptions to match what I had inpolicycoreutils.

[Christopher J. PeBenito]

On Thu, 2007-12-06 at 14:42 -0500, Daniel J Walsh wrote:
> Hopefully these descriptions are a little better.

>  policy/global_tunables              |   35 +++++++++++++---------------
>  policy/modules/apps/java.te         |    7 -----
>  policy/modules/services/apache.te   |   44 +++++++++++++++++++++++++++++-------
>  policy/modules/services/bind.te     |    2 -
>  policy/modules/services/ftp.te      |    4 +--
>  policy/modules/services/kerberos.te |    2 -
>  policy/modules/services/openvpn.te  |    2 -
>  policy/modules/services/postfix.te  |   12 +++++++++
>  policy/modules/services/rpc.te      |    4 +--
>  policy/modules/services/rsync.te    |    4 +--
>  policy/modules/services/samba.te    |   12 ++++-----
>  policy/modules/system/mount.te      |    2 -
>  policy/modules/system/userdomain.te |    9 -------
>  13 files changed, 81 insertions(+), 58 deletions(-)

I applied the changes for the tunables that already exist, there were
some other ones that leaked into the patch.  It brought to my attention
that there are a few in global that only apply to unconfined.  I want to
move that to unconfined, but there is a possibility of an upgrade
problem now that unconfined is separated out into its own module on RH.
Does the RPM always install the base and the modules in one single
semodule command?

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Patch to update boolean descriptions to match what I had in policycoreutils.

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Christopher J. PeBenito wrote:
> On Thu, 2007-12-06 at 14:42 -0500, Daniel J Walsh wrote:
>> Hopefully these descriptions are a little better.
> 
>>  policy/global_tunables              |   35 +++++++++++++---------------
>>  policy/modules/apps/java.te         |    7 -----
>>  policy/modules/services/apache.te   |   44 +++++++++++++++++++++++++++++-------
>>  policy/modules/services/bind.te     |    2 -
>>  policy/modules/services/ftp.te      |    4 +--
>>  policy/modules/services/kerberos.te |    2 -
>>  policy/modules/services/openvpn.te  |    2 -
>>  policy/modules/services/postfix.te  |   12 +++++++++
>>  policy/modules/services/rpc.te      |    4 +--
>>  policy/modules/services/rsync.te    |    4 +--
>>  policy/modules/services/samba.te    |   12 ++++-----
>>  policy/modules/system/mount.te      |    2 -
>>  policy/modules/system/userdomain.te |    9 -------
>>  13 files changed, 81 insertions(+), 58 deletions(-)
> 
> I applied the changes for the tunables that already exist, there were
> some other ones that leaked into the patch.  It brought to my attention
> that there are a few in global that only apply to unconfined.  I want to
> move that to unconfined, but there is a possibility of an upgrade
> problem now that unconfined is separated out into its own module on RH.
> Does the RPM always install the base and the modules in one single
> semodule command?
> 
Yes
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFHWW59rlYvE4MpobMRAq+3AKDgHh1z+xlFAjXLK3hZLC1BRp7zyACgsA9O
uOtlVo/KMQIgOBJm5ZKMZB4=
=g3LG
-----END PGP SIGNATURE-----

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.