Re: [refpolicy-patch 14/23] rhgb policy update

[Daniel J Walsh <dwalsh@redhat.com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Chris PeBenito wrote:
> On Tue, 2008-07-22 at 16:29 -0400, Chris PeBenito wrote:
>> On Sat, 2008-07-19 at 22:50 +0200, david@hardeman.nu wrote:
>>> plain text document attachment (policy_modules_services_rhgb.patch)
>>> rhgb (RedHat Graphical Boot) is RH specific so this should be uncontroversial...
>>>
>>> diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/rhgb.if serefpolicy-3.5.0/policy/modules/services/rhgb.if
>>> --- nsaserefpolicy/policy/modules/services/rhgb.if	2008-07-10 11:38:46.000000000 -0400
>>> +++ serefpolicy-3.5.0/policy/modules/services/rhgb.if	2008-07-15 14:05:13.000000000 -0400
>>> @@ -4,7 +4,7 @@
>>>  ## <summary>
>>>  ##	RHGB stub interface.  No access allowed.
>>>  ## </summary>
>>> -## <param name="domain" unused="true">
>>> +## <param name="domain">
>>>  ##	<summary>
>>>  ##	N/A
>>>  ##	</summary>
>> This reverses an upstream change.
>>
>>> diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/rhgb.te serefpolicy-3.5.0/policy/modules/services/rhgb.te
>>> --- nsaserefpolicy/policy/modules/services/rhgb.te	2008-07-10 11:38:46.000000000 -0400
>>> +++ serefpolicy-3.5.0/policy/modules/services/rhgb.te	2008-07-15 14:05:13.000000000 -0400
>>> @@ -92,6 +92,7 @@
>>>  term_getattr_pty_fs(rhgb_t)
>>>  
>>>  init_write_initctl(rhgb_t)
>>> +init_chat(rhgb_t)
>>>  
>>>  libs_use_ld_so(rhgb_t)
>>>  libs_use_shared_libs(rhgb_t)
>> This interface doesn't exist.
> 
> This is more towards Dan, but how much do we care about this policy, now
> that rhgb has been removed from Fedora?
> 
Probably not for Fedora, but it is still in RHEL5.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkiJK3MACgkQrlYvE4MpobMsMACbB+ue533Sh87qH1rSiMdu3Id7
xswAn0WA8q9ROfxj1yWTOZEthMPQFztm
=jlwQ
-----END PGP SIGNATURE-----

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.