All of lore.kernel.org
 help / color / mirror / Atom feed
* [refpolicy] services_sendmail.patch
@ 2008-10-14 19:39 Daniel J Walsh
  0 siblings, 0 replies; 6+ messages in thread
From: Daniel J Walsh @ 2008-10-14 19:39 UTC (permalink / raw)
  To: refpolicy

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F10/services_sendmail.patch

Add sendmail_run interface


Add sendmail_domtrans_unconfined interface to allow unconfined to create
/etc/alias with the correct label


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkj09WUACgkQrlYvE4MpobNdFACeKBN95FrDN7ppA0jMkSE9Dae9
iUUAoIYIz8k+CRMJxrnRjl2JjCZQbEGF
=iInF
-----END PGP SIGNATURE-----

^ permalink raw reply	[flat|nested] 6+ messages in thread

* [refpolicy] services_sendmail.patch
@ 2009-03-24 13:56 Daniel J Walsh
  0 siblings, 0 replies; 6+ messages in thread
From: Daniel J Walsh @ 2009-03-24 13:56 UTC (permalink / raw)
  To: refpolicy

http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_sendmail.patch

Added unconfined_sendmail_t so unconfined domain could execute sendmail 
without getting confined.

sendmail needs dac_override to read content owned by non root users

Needs to read anon_inode and inotify


communicates with mail handling daemons

Remove todo section

^ permalink raw reply	[flat|nested] 6+ messages in thread

* [refpolicy] services_sendmail.patch
@ 2009-11-12 21:58 Daniel J Walsh
  2010-01-08 15:38 ` Christopher J. PeBenito
  0 siblings, 1 reply; 6+ messages in thread
From: Daniel J Walsh @ 2009-11-12 21:58 UTC (permalink / raw)
  To: refpolicy

http://people.fedoraproject.org/~dwalsh/SELinux/F12/services_sendmail.patch

Interface to cover leaked file descriptors.

Lots of other fixes.

^ permalink raw reply	[flat|nested] 6+ messages in thread

* [refpolicy] services_sendmail.patch
  2009-11-12 21:58 Daniel J Walsh
@ 2010-01-08 15:38 ` Christopher J. PeBenito
  0 siblings, 0 replies; 6+ messages in thread
From: Christopher J. PeBenito @ 2010-01-08 15:38 UTC (permalink / raw)
  To: refpolicy

On Thu, 2009-11-12 at 16:58 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F12/services_sendmail.patch
> 
> Interface to cover leaked file descriptors.
> 
> Lots of other fixes.

Merged.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

^ permalink raw reply	[flat|nested] 6+ messages in thread

* [refpolicy] services_sendmail.patch
@ 2010-02-23 20:52 Daniel J Walsh
  0 siblings, 0 replies; 6+ messages in thread
From: Daniel J Walsh @ 2010-02-23 20:52 UTC (permalink / raw)
  To: refpolicy

http://people.fedoraproject.org/~dwalsh/SELinux/F13/services_sendmail.patch

Sendmail can setsched and setpgid.

Dontaudit use of generic ptys.

Can be used to send mail from users homedir.

Interaces with spamd, postfix.

^ permalink raw reply	[flat|nested] 6+ messages in thread

* [refpolicy] services_sendmail.patch
@ 2010-08-26 22:19 Daniel J Walsh
  0 siblings, 0 replies; 6+ messages in thread
From: Daniel J Walsh @ 2010-08-26 22:19 UTC (permalink / raw)
  To: refpolicy

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F14/services_sendmail.patch

Add _admin and other fixes.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkx26IAACgkQrlYvE4MpobPSDwCdFPshpVHiRmq0O5FjgqcYIl5a
TVIAni9vq3Gw5/9F+oEXDqFCVav5NxI4
=bRtH
-----END PGP SIGNATURE-----

^ permalink raw reply	[flat|nested] 6+ messages in thread

end of thread, other threads:[~2010-08-26 22:19 UTC | newest]

Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2008-10-14 19:39 [refpolicy] services_sendmail.patch Daniel J Walsh
  -- strict thread matches above, loose matches on Subject: below --
2009-03-24 13:56 Daniel J Walsh
2009-11-12 21:58 Daniel J Walsh
2010-01-08 15:38 ` Christopher J. PeBenito
2010-02-23 20:52 Daniel J Walsh
2010-08-26 22:19 Daniel J Walsh

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.