* [refpolicy] system_iscsi.patch
@ 2009-03-05 17:16 Daniel J Walsh
2009-03-20 14:23 ` Christopher J. PeBenito
0 siblings, 1 reply; 9+ messages in thread
From: Daniel J Walsh @ 2009-03-05 17:16 UTC (permalink / raw)
To: refpolicy
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
http://people.fedoraproject.org/~dwalsh/SELinux/F11/system_iscsi.patch
iscsi needs net_raw and sys_admin
Manages a lock directory
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iEYEARECAAYFAkmwCNsACgkQrlYvE4MpobPXawCePJIl7bKfEktz/XFccJ3assvm
Yi4An0AV/hwvnyomVtt2UEI69l/e/pDq
=aXr4
-----END PGP SIGNATURE-----
^ permalink raw reply [flat|nested] 9+ messages in thread
* [refpolicy] system_iscsi.patch
2009-03-05 17:16 [refpolicy] system_iscsi.patch Daniel J Walsh
@ 2009-03-20 14:23 ` Christopher J. PeBenito
0 siblings, 0 replies; 9+ messages in thread
From: Christopher J. PeBenito @ 2009-03-20 14:23 UTC (permalink / raw)
To: refpolicy
On Thu, 2009-03-05 at 13:16 -0400, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F11/system_iscsi.patch
>
> iscsi needs net_raw and sys_admin
>
> Manages a lock directory
Merged.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
^ permalink raw reply [flat|nested] 9+ messages in thread
* [refpolicy] system_iscsi.patch
@ 2009-03-20 16:58 Daniel J Walsh
0 siblings, 0 replies; 9+ messages in thread
From: Daniel J Walsh @ 2009-03-20 16:58 UTC (permalink / raw)
To: refpolicy
http://people.fedoraproject.org/~dwalsh/SELinux/F11/system_iscsi.patch
Iscsi searchse debugfs
calls getpw*
^ permalink raw reply [flat|nested] 9+ messages in thread
* [refpolicy] system_iscsi.patch
@ 2009-11-12 22:10 Daniel J Walsh
2009-11-24 16:08 ` Christopher J. PeBenito
0 siblings, 1 reply; 9+ messages in thread
From: Daniel J Walsh @ 2009-11-12 22:10 UTC (permalink / raw)
To: refpolicy
http://people.fedoraproject.org/~dwalsh/SELinux/F12/system_iscsi.patch
ISCSI calls getpw
reads localization
does a ps
used debugfs
^ permalink raw reply [flat|nested] 9+ messages in thread
* [refpolicy] system_iscsi.patch
2009-11-12 22:10 Daniel J Walsh
@ 2009-11-24 16:08 ` Christopher J. PeBenito
2009-11-24 20:10 ` Daniel J Walsh
0 siblings, 1 reply; 9+ messages in thread
From: Christopher J. PeBenito @ 2009-11-24 16:08 UTC (permalink / raw)
To: refpolicy
On Thu, 2009-11-12 at 17:10 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F12/system_iscsi.patch
>
> ISCSI calls getpw
>
> reads localization
>
> does a ps
Does this really need to be allowed?
> used debugfs
Otherwise merged.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
^ permalink raw reply [flat|nested] 9+ messages in thread
* [refpolicy] system_iscsi.patch
2009-11-24 16:08 ` Christopher J. PeBenito
@ 2009-11-24 20:10 ` Daniel J Walsh
0 siblings, 0 replies; 9+ messages in thread
From: Daniel J Walsh @ 2009-11-24 20:10 UTC (permalink / raw)
To: refpolicy
On 11/24/2009 11:08 AM, Christopher J. PeBenito wrote:
> On Thu, 2009-11-12 at 17:10 -0500, Daniel J Walsh wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F12/system_iscsi.patch
>>
>> ISCSI calls getpw
>>
>> reads localization
>>
>> does a ps
>
> Does this really need to be allowed?
>
>> used debugfs
>
>
> Otherwise merged.
>
>
Probably can be changed to a dontaudit.
^ permalink raw reply [flat|nested] 9+ messages in thread
* [refpolicy] system_iscsi.patch
@ 2010-02-23 21:13 Daniel J Walsh
2010-03-09 20:14 ` Christopher J. PeBenito
0 siblings, 1 reply; 9+ messages in thread
From: Daniel J Walsh @ 2010-02-23 21:13 UTC (permalink / raw)
To: refpolicy
http://people.fedoraproject.org/~dwalsh/SELinux/F13/system_iscsi.patch
New log file
icscid execs itself
Reads network state
rw userio devices
Tries to read all domains
Connect to init streams
Uses tgtd semaphores.
^ permalink raw reply [flat|nested] 9+ messages in thread
* [refpolicy] system_iscsi.patch
2010-02-23 21:13 Daniel J Walsh
@ 2010-03-09 20:14 ` Christopher J. PeBenito
0 siblings, 0 replies; 9+ messages in thread
From: Christopher J. PeBenito @ 2010-03-09 20:14 UTC (permalink / raw)
To: refpolicy
On Tue, 2010-02-23 at 16:13 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F13/system_iscsi.patch
>
> New log file
>
> icscid execs itself
> Reads network state
>
> rw userio devices
>
> Tries to read all domains
>
> Connect to init streams
>
> Uses tgtd semaphores.
Merged.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
^ permalink raw reply [flat|nested] 9+ messages in thread
* [refpolicy] system_iscsi.patch
@ 2010-08-26 23:34 Daniel J Walsh
0 siblings, 0 replies; 9+ messages in thread
From: Daniel J Walsh @ 2010-08-26 23:34 UTC (permalink / raw)
To: refpolicy
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
http://people.fedoraproject.org/~dwalsh/SELinux/F14/system_iscsi.patch
Iscsi reads and writes raw memory
+iscsi_manage_semaphores(tgtd_t)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkx2+foACgkQrlYvE4MpobN3QACglURjFkpgx8Kxphn5Vm/Luy1e
7RUAoOd3xMuFbZZmVzu69WcvsvBzhYWX
=DPQ8
-----END PGP SIGNATURE-----
^ permalink raw reply [flat|nested] 9+ messages in thread
end of thread, other threads:[~2010-08-26 23:34 UTC | newest]
Thread overview: 9+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2009-03-05 17:16 [refpolicy] system_iscsi.patch Daniel J Walsh
2009-03-20 14:23 ` Christopher J. PeBenito
-- strict thread matches above, loose matches on Subject: below --
2009-03-20 16:58 Daniel J Walsh
2009-11-12 22:10 Daniel J Walsh
2009-11-24 16:08 ` Christopher J. PeBenito
2009-11-24 20:10 ` Daniel J Walsh
2010-02-23 21:13 Daniel J Walsh
2010-03-09 20:14 ` Christopher J. PeBenito
2010-08-26 23:34 Daniel J Walsh
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.