* [refpolicy] system_modutils.patch
@ 2009-03-05 17:22 Daniel J Walsh
0 siblings, 0 replies; 6+ messages in thread
From: Daniel J Walsh @ 2009-03-05 17:22 UTC (permalink / raw)
To: refpolicy
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
http://people.fedoraproject.org/~dwalsh/SELinux/F11/system_modutils.patch
insmod needs sys_nice and mknod
Reads kernel network state
Calls kernel_setsched
Creates chr files
Can restart init scripts
We run it unconfined on redhat also
Transitions to also and write hal log files
Reads rpm script tmp files during install (kernel install?)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iEYEARECAAYFAkmwCkIACgkQrlYvE4MpobNY+QCcCCjixa5diKG3wj6do8anOsQk
7AEAn0W0reGBe66Qxir5UkpH4WBGxlxZ
=eLAE
-----END PGP SIGNATURE-----
^ permalink raw reply [flat|nested] 6+ messages in thread
* [refpolicy] system_modutils.patch
@ 2009-11-12 22:14 Daniel J Walsh
2009-12-01 14:23 ` Christopher J. PeBenito
0 siblings, 1 reply; 6+ messages in thread
From: Daniel J Walsh @ 2009-11-12 22:14 UTC (permalink / raw)
To: refpolicy
http://people.fedoraproject.org/~dwalsh/SELinux/F12/system_modutils.patch
New file context
new interfaces
^ permalink raw reply [flat|nested] 6+ messages in thread
* [refpolicy] system_modutils.patch
2009-11-12 22:14 Daniel J Walsh
@ 2009-12-01 14:23 ` Christopher J. PeBenito
0 siblings, 0 replies; 6+ messages in thread
From: Christopher J. PeBenito @ 2009-12-01 14:23 UTC (permalink / raw)
To: refpolicy
On Thu, 2009-11-12 at 17:14 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F12/system_modutils.patch
>
> New file context
>
> new interfaces
Merged.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
^ permalink raw reply [flat|nested] 6+ messages in thread
* [refpolicy] system_modutils.patch
@ 2010-02-23 21:17 Daniel J Walsh
2010-03-17 15:59 ` Christopher J. PeBenito
0 siblings, 1 reply; 6+ messages in thread
From: Daniel J Walsh @ 2010-02-23 21:17 UTC (permalink / raw)
To: refpolicy
http://people.fedoraproject.org/~dwalsh/SELinux/F13/system_modutils.patch
Lots of updated access for insmod
^ permalink raw reply [flat|nested] 6+ messages in thread
* [refpolicy] system_modutils.patch
2010-02-23 21:17 Daniel J Walsh
@ 2010-03-17 15:59 ` Christopher J. PeBenito
0 siblings, 0 replies; 6+ messages in thread
From: Christopher J. PeBenito @ 2010-03-17 15:59 UTC (permalink / raw)
To: refpolicy
On Tue, 2010-02-23 at 16:17 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F13/system_modutils.patch
>
> Lots of updated access for insmod
Why is this creating chr files? Why are they device_t?
Why does it request load module, when it can load them itself?
Why does it mount rpc_pipefs?
Otherwise merged.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
^ permalink raw reply [flat|nested] 6+ messages in thread
* [refpolicy] system_modutils.patch
@ 2010-08-26 23:42 Daniel J Walsh
0 siblings, 0 replies; 6+ messages in thread
From: Daniel J Walsh @ 2010-08-26 23:42 UTC (permalink / raw)
To: refpolicy
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
http://people.fedoraproject.org/~dwalsh/SELinux/F14/system_modutils.patch
+modutils_list_module_config(ncftool_t)
MLS policy fixes
depmod does strange stuff when building for kernels.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkx2+9kACgkQrlYvE4MpobMsFQCfXjFgxfQJ7EMNLx28T30sU3e8
4wcAoLAJt1sQz6xIiehLdFDX46WhVg1C
=Vwy4
-----END PGP SIGNATURE-----
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2010-08-26 23:42 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2009-03-05 17:22 [refpolicy] system_modutils.patch Daniel J Walsh
-- strict thread matches above, loose matches on Subject: below --
2009-11-12 22:14 Daniel J Walsh
2009-12-01 14:23 ` Christopher J. PeBenito
2010-02-23 21:17 Daniel J Walsh
2010-03-17 15:59 ` Christopher J. PeBenito
2010-08-26 23:42 Daniel J Walsh
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.