[refpolicy] system_mount.patch

[refpolicy] system_mount.patch

[Daniel J Walsh]

http://people.fedoraproject.org/~dwalsh/SELinux/F11/system_mount.patch

More file context for mount

Additional access required for mount.davfs2

Added mount_var_run_t

mount interacs with kernel

mount.tmpfs now needs to write to tmpfs_t file system

mount --context requires us to relabel to any file context

mount uses dbus

mount permisions to use ntfs

[refpolicy] system_mount.patch

[Daniel J Walsh]

http://people.fedoraproject.org/~dwalsh/SELinux/F12/system_mount.patch

Latest labels for mount.

[refpolicy] system_mount.patch

[Daniel J Walsh]

http://people.fedoraproject.org/~dwalsh/SELinux/F13/system_mount.patch

File context for fusermount so I can stop xguest from using mount

New file context for mount

Dontaudit broken leaks

Lots of new access for mount.

[refpolicy] system_mount.patch

[Christopher J. PeBenito]

On Tue, 2010-02-23 at 17:17 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F13/system_mount.patch
> 
> File context for fusermount so I can stop xguest from using mount
> 
> New file context for mount
> 
> Dontaudit broken leaks
> 
> Lots of new access for mount.

How much of this new access is due to fusermount?  Dbus usage, exec'ing
things unrelated to mount like ssh, transitioning to rpcd?  Sounds like
fusermount might need its own type after all.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

[refpolicy] system_mount.patch

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F14/system_mount.patch

Lots of fixes for mount

Add policy for fusermount
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkx2/AIACgkQrlYvE4MpobMaQACgqlQljnqjPZfziGoDvKCQ24qh
JJcAoOlgKdcntWfMDOhzgoWj0QIRfvht
=z05p
-----END PGP SIGNATURE-----