[refpolicy] roles_unprivuser.patch

All of lore.kernel.org
 help / color / mirror / Atom feed

* [refpolicy] roles_unprivuser.patch
@ 2009-03-05 16:27 Daniel J Walsh
  0 siblings, 0 replies; 5+ messages in thread
From: Daniel J Walsh @ 2009-03-05 16:27 UTC (permalink / raw)
  To: refpolicy

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


http://people.fedoraproject.org/~dwalsh/SELinux/F11/roles_unprivuser.patch

unprivuser should not have access to all these roles.

Allow users/administrators to customize their policy not ship with a
bung of junk.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkmv/YEACgkQrlYvE4MpobPcJQCgyWZSFjm0/valDDk1HQad1s+5
joEAn3bUFQpzGsaxcA0MEQxUWxmx1aIQ
=N0oZ
-----END PGP SIGNATURE-----

^ permalink raw reply	[flat|nested] 5+ messages in thread

* [refpolicy] roles_unprivuser.patch
@ 2009-11-12 21:09 Daniel J Walsh
  2010-02-17 14:03 ` Christopher J. PeBenito
  0 siblings, 1 reply; 5+ messages in thread
From: Daniel J Walsh @ 2009-11-12 21:09 UTC (permalink / raw)
  To: refpolicy

http://people.fedoraproject.org/~dwalsh/SELinux/F12/roles_unprivuser.patch

Can we at least ifdef all the transition insanity to redhat does not have to support ever wacky policy ever written for user apps.

^ permalink raw reply	[flat|nested] 5+ messages in thread

* [refpolicy] roles_unprivuser.patch
  2009-11-12 21:09 Daniel J Walsh
@ 2010-02-17 14:03 ` Christopher J. PeBenito
  0 siblings, 0 replies; 5+ messages in thread
From: Christopher J. PeBenito @ 2010-02-17 14:03 UTC (permalink / raw)
  To: refpolicy

On Thu, 2009-11-12 at 16:09 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F12/roles_unprivuser.patch
> 
> Can we at least ifdef all the transition insanity to redhat does not
> have to support ever wacky policy ever written for user apps.

Yes, feel free to add an ifndef distro_redhat block.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

^ permalink raw reply	[flat|nested] 5+ messages in thread

* [refpolicy] roles_unprivuser.patch
@ 2010-06-02 20:33 Daniel J Walsh
  2010-07-06 12:49 ` Christopher J. PeBenito
  0 siblings, 1 reply; 5+ messages in thread
From: Daniel J Walsh @ 2010-06-02 20:33 UTC (permalink / raw)
  To: refpolicy

http://people.fedoraproject.org/~dwalsh/SELinux/F14/roles_unprivuser.patch

Additional rights for user_t.

Red Hat does not want to transition to lots of user domains, by default

^ permalink raw reply	[flat|nested] 5+ messages in thread

* [refpolicy] roles_unprivuser.patch
  2010-06-02 20:33 Daniel J Walsh
@ 2010-07-06 12:49 ` Christopher J. PeBenito
  0 siblings, 0 replies; 5+ messages in thread
From: Christopher J. PeBenito @ 2010-07-06 12:49 UTC (permalink / raw)
  To: refpolicy

On 06/02/10 16:33, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F14/roles_unprivuser.patch
>
> Additional rights for user_t.
>
> Red Hat does not want to transition to lots of user domains, by default

Needs style fixes like the other two role patches.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com

^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2010-07-06 12:49 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2009-03-05 16:27 [refpolicy] roles_unprivuser.patch Daniel J Walsh
  -- strict thread matches above, loose matches on Subject: below --
2009-11-12 21:09 Daniel J Walsh
2010-02-17 14:03 ` Christopher J. PeBenito
2010-06-02 20:33 Daniel J Walsh
2010-07-06 12:49 ` Christopher J. PeBenito

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.