All of lore.kernel.org
 help / color / mirror / Atom feed
* [refpolicy] services_nis.patch
@ 2008-10-14 20:17 Daniel J Walsh
  0 siblings, 0 replies; 5+ messages in thread
From: Daniel J Walsh @ 2008-10-14 20:17 UTC (permalink / raw)
  To: refpolicy

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F10/services_nis.patch


Add initrc labels

Requires net_bind_service for all nis services

Binds to ports 600-1023 (rpc ports

Add interface to nis_authenticate

Add admin interface and initrc_domtrans for use by networkmanager

ypbind has dbus support

yppasswd needs dac_override
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkj0/kgACgkQrlYvE4MpobMwggCdFctUCMe6jaaleBTUg3tt8Yrh
5hoAnA4qNHRou0jD455zFVwyhX6sqxQM
=gzpq
-----END PGP SIGNATURE-----

^ permalink raw reply	[flat|nested] 5+ messages in thread
* [refpolicy] services_nis.patch
@ 2010-08-26 21:57 Daniel J Walsh
  0 siblings, 0 replies; 5+ messages in thread
From: Daniel J Walsh @ 2010-08-26 21:57 UTC (permalink / raw)
  To: refpolicy

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F14/services_nis.patch

Fix name on yppasswdd change to use rpcpports
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkx242IACgkQrlYvE4MpobMZYgCg63gHzraMzjr31fEAwq9slcqt
JFIAoLQgwf4kw8TFI25VnRuTAR1Dng6r
=vSua
-----END PGP SIGNATURE-----

^ permalink raw reply	[flat|nested] 5+ messages in thread
* [refpolicy] services_nis.patch
@ 2010-02-23 21:52 Daniel J Walsh
  0 siblings, 0 replies; 5+ messages in thread
From: Daniel J Walsh @ 2010-02-23 21:52 UTC (permalink / raw)
  To: refpolicy

http://people.fedoraproject.org/~dwalsh/SELinux/F13/services_nis.patch

policy for init scripts

Lots of new acces for yp domains.

^ permalink raw reply	[flat|nested] 5+ messages in thread
* [refpolicy] services_nis.patch
@ 2009-06-09  0:49 Daniel J Walsh
  0 siblings, 0 replies; 5+ messages in thread
From: Daniel J Walsh @ 2009-06-09  0:49 UTC (permalink / raw)
  To: refpolicy

http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_nis.patch

Add policy for init scripts

yp services need to net_bind_service

Need to dontaudit binding reserveed ports.

Add nis_authenticate interface


ypbind uses dbus and communicates with networkmanager

fixes to allow services to bind rpc_PORTS.

^ permalink raw reply	[flat|nested] 5+ messages in thread
* [refpolicy] services_nis.patch
@ 2008-09-24 20:19 Daniel J Walsh
  0 siblings, 0 replies; 5+ messages in thread
From: Daniel J Walsh @ 2008-09-24 20:19 UTC (permalink / raw)
  To: refpolicy

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F10/services_nis.patch

Add initrc script support

allow admin to start/stop service

Admin needs admin_pattern on all file types


Fix path for /usr/lib64/yp/ypxfr

Does need net_bind_service

binds to only rpc ports

add interface for nis_authenticate uses by sasl

ypbind uses dbus

chats with networkmanager

yppasswd needs dac_override

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkjaoMwACgkQrlYvE4MpobMTgwCg5qT1F4354T9ZIxlmsGmEary4
Ym0AoNGuYS/L6bx1ABQD9aPHz6AKof4O
=iPhx
-----END PGP SIGNATURE-----

^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2010-08-26 21:57 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2008-10-14 20:17 [refpolicy] services_nis.patch Daniel J Walsh
  -- strict thread matches above, loose matches on Subject: below --
2010-08-26 21:57 Daniel J Walsh
2010-02-23 21:52 Daniel J Walsh
2009-06-09  0:49 Daniel J Walsh
2008-09-24 20:19 Daniel J Walsh

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.