All of lore.kernel.org
 help / color / mirror / Atom feed
* [refpolicy] services_rshd.patch
@ 2008-10-14 19:46 Daniel J Walsh
  2008-11-18 20:04 ` Christopher J. PeBenito
  0 siblings, 1 reply; 6+ messages in thread
From: Daniel J Walsh @ 2008-10-14 19:46 UTC (permalink / raw)
  To: refpolicy

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F10/services_rshd.patch

rshd needs kill capability

Connects to ports 600-1023 (rpc ports)

Needs to be defined as an auth_login_pgm_domain

Searches logs

uses kerberos cache and keytabs

Sends unconfined_processes signals.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkj09yUACgkQrlYvE4MpobOQDACg64jTLEmo0tfEc+S2LwTZW+NI
NjQAn13UAtiZZ2kXDv6lsAQCvHQVQh+n
=S+ke
-----END PGP SIGNATURE-----

^ permalink raw reply	[flat|nested] 6+ messages in thread

* [refpolicy] services_rshd.patch
  2008-10-14 19:46 Daniel J Walsh
@ 2008-11-18 20:04 ` Christopher J. PeBenito
  0 siblings, 0 replies; 6+ messages in thread
From: Christopher J. PeBenito @ 2008-11-18 20:04 UTC (permalink / raw)
  To: refpolicy

On Tue, 2008-10-14 at 15:46 -0400, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F10/services_rshd.patch
> 
> rshd needs kill capability
> 
> Connects to ports 600-1023 (rpc ports)
> 
> Needs to be defined as an auth_login_pgm_domain
> 
> Searches logs
> 
> uses kerberos cache and keytabs
> 
> Sends unconfined_processes signals.

Merged.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

^ permalink raw reply	[flat|nested] 6+ messages in thread

* [refpolicy] services_rshd.patch
@ 2008-11-20 15:54 Daniel J Walsh
  0 siblings, 0 replies; 6+ messages in thread
From: Daniel J Walsh @ 2008-11-20 15:54 UTC (permalink / raw)
  To: refpolicy

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_rshd.patch

Needs files_manage_generic_tmp_dirs in order to deliver forwarded
kerberos tgt.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkkliCoACgkQrlYvE4MpobPIfQCfT5PgXTm+i3/Hu/oWQgod5yrx
b6oAoLSapftJiJ+OPmU6Dw0Fn6d+rMID
=X2GW
-----END PGP SIGNATURE-----

^ permalink raw reply	[flat|nested] 6+ messages in thread

* [refpolicy] services_rshd.patch
@ 2009-06-09  1:04 Daniel J Walsh
  2009-06-12 19:44 ` Christopher J. PeBenito
  0 siblings, 1 reply; 6+ messages in thread
From: Daniel J Walsh @ 2009-06-09  1:04 UTC (permalink / raw)
  To: refpolicy

http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_rshd.patch

rshd reads .rlogin file

Can manage tmp files created by other domains.

^ permalink raw reply	[flat|nested] 6+ messages in thread

* [refpolicy] services_rshd.patch
  2009-06-09  1:04 Daniel J Walsh
@ 2009-06-12 19:44 ` Christopher J. PeBenito
  0 siblings, 0 replies; 6+ messages in thread
From: Christopher J. PeBenito @ 2009-06-12 19:44 UTC (permalink / raw)
  To: refpolicy

On Mon, 2009-06-08 at 21:04 -0400, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_rshd.patch
> 
> rshd reads .rlogin file
> 
> Can manage tmp files created by other domains.

Merged.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

^ permalink raw reply	[flat|nested] 6+ messages in thread

* [refpolicy] services_rshd.patch
@ 2010-08-26 22:17 Daniel J Walsh
  0 siblings, 0 replies; 6+ messages in thread
From: Daniel J Walsh @ 2010-08-26 22:17 UTC (permalink / raw)
  To: refpolicy

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F14/services_rshd.patch


rshd needs to create kerberos cc files in /tmp
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkx26AQACgkQrlYvE4MpobP8HwCgiWIjHKjdU42eE8D5kDwupZnG
a9QAn33qLeTUOhIWOYUz7Zr56WXjUWza
=/jKp
-----END PGP SIGNATURE-----

^ permalink raw reply	[flat|nested] 6+ messages in thread

end of thread, other threads:[~2010-08-26 22:17 UTC | newest]

Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2008-11-20 15:54 [refpolicy] services_rshd.patch Daniel J Walsh
  -- strict thread matches above, loose matches on Subject: below --
2010-08-26 22:17 Daniel J Walsh
2009-06-09  1:04 Daniel J Walsh
2009-06-12 19:44 ` Christopher J. PeBenito
2008-10-14 19:46 Daniel J Walsh
2008-11-18 20:04 ` Christopher J. PeBenito

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.