All of lore.kernel.org
 help / color / mirror / Atom feed
* [refpolicy] services_avahi.patch and services_dbus.patch
@ 2008-11-20 15:22 Daniel J Walsh
  0 siblings, 0 replies; only message in thread
From: Daniel J Walsh @ 2008-11-20 15:22 UTC (permalink / raw)
  To: refpolicy

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_avahi.patch


Added avahi_signull and avahi_initrc_domtrans  both used by networkmanager

Also allow avahi to search var_lib and avahi is now started by dbus.



http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_dbus.patch

dbus needs to be ranged.

Fix system_dbusd_var_lib_t definition.

dbus needs getcap and setpgid

dbus can exec itself.

Lists inotify

dbus can be used to start initrc scripts and random binaries so needs to
transition to initrc_t.  Probably should be blocked on mls machines.

Starts networkmanager,  add dbus unconfiend

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkklgKcACgkQrlYvE4MpobNhwwCg1UlOZrS42vEEvkl0DSPRW4R4
S/MAoKDXPrQe+fZJkMgx3JaQhPJSrjRK
=DK63
-----END PGP SIGNATURE-----

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2008-11-20 15:22 UTC | newest]

Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2008-11-20 15:22 [refpolicy] services_avahi.patch and services_dbus.patch Daniel J Walsh

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.