From: dwalsh@redhat.com (Daniel J Walsh)
To: refpolicy@oss.tresys.com
Subject: [refpolicy] services_networkmanager.patch
Date: Wed, 24 Sep 2008 16:24:38 -0400 [thread overview]
Message-ID: <48DAA206.8060208@redhat.com> (raw)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
http://people.fedoraproject.org/~dwalsh/SELinux/F10/services_networkmanager.patch
Add initrc script support
allow admin to start/stop service
Admin needs admin_pattern on all file types
/usr/sbin/NetworkManagerDispatcher and /usr/sbin/nm-system-settings need
to run as networkmanager
New files in /var/run
network_manager need sys_admin in order to set the hostname, needs chown
, fsetid, setgid, sys_nice for interacting with network devices
needs getcap to read its capabilities
generates socket files in /tmp
reads kernel_debugfs when it crashes, also executes rpm to gather crash info
uses inotify
uses getpw* so needs auth_use_nsswitch
can now be started via dbus
hal logs set as stdout on resume
restarts and communicates with nscd
restarts ntp, and ypbind, and ppp
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iEYEARECAAYFAkjaogYACgkQrlYvE4MpobMjkACfbq4gjnPKQ2a4zG9Br82o4w+p
qGwAnj5x6WTH6oqo6znRIVLpAoYC0Rog
=YL5p
-----END PGP SIGNATURE-----
next reply other threads:[~2008-09-24 20:24 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-09-24 20:24 Daniel J Walsh [this message]
-- strict thread matches above, loose matches on Subject: below --
2008-10-14 20:21 [refpolicy] services_networkmanager.patch Daniel J Walsh
2008-11-20 15:32 Daniel J Walsh
2009-03-05 20:43 Daniel J Walsh
2009-11-12 21:42 Daniel J Walsh
2010-02-23 22:18 Daniel J Walsh
2010-08-26 21:57 Daniel J Walsh
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=48DAA206.8060208@redhat.com \
--to=dwalsh@redhat.com \
--cc=refpolicy@oss.tresys.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.