* [refpolicy] apps_webalizer.patch
@ 2009-08-28 20:17 Daniel J Walsh
2009-08-31 11:29 ` Dominick Grift
2009-09-02 13:11 ` Christopher J. PeBenito
0 siblings, 2 replies; 4+ messages in thread
From: Daniel J Walsh @ 2009-08-28 20:17 UTC (permalink / raw)
To: refpolicy
http://people.fedoraproject.org/~dwalsh/SELinux/F12/apps_webalizer.patch
Webalizer does not list inotify, this was caused by leaked file descriptors in either dbus or cron. Both of which have been cleaned up.
^ permalink raw reply [flat|nested] 4+ messages in thread
* [refpolicy] apps_webalizer.patch
2009-08-28 20:17 [refpolicy] apps_webalizer.patch Daniel J Walsh
@ 2009-08-31 11:29 ` Dominick Grift
2009-08-31 12:56 ` Daniel J Walsh
2009-09-02 13:11 ` Christopher J. PeBenito
1 sibling, 1 reply; 4+ messages in thread
From: Dominick Grift @ 2009-08-31 11:29 UTC (permalink / raw)
To: refpolicy
On Fri, Aug 28, 2009 at 04:17:36PM -0400, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F12/apps_webalizer.patch
>
> Webalizer does not list inotify, this was caused by leaked file descriptors in either dbus or cron. Both of which have been cleaned up.
how about we also add a miscfiles_read_public_files(webalizer_t)
Some people want to label their webroot public_content_t (for rsync and other sharing), however if they do that then webalizer can no longer access the web content.
> _______________________________________________
> refpolicy mailing list
> refpolicy at oss.tresys.com
> http://oss.tresys.com/mailman/listinfo/refpolicy
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20090831/21f686e5/attachment.bin
^ permalink raw reply [flat|nested] 4+ messages in thread
* [refpolicy] apps_webalizer.patch
2009-08-31 11:29 ` Dominick Grift
@ 2009-08-31 12:56 ` Daniel J Walsh
0 siblings, 0 replies; 4+ messages in thread
From: Daniel J Walsh @ 2009-08-31 12:56 UTC (permalink / raw)
To: refpolicy
On 08/31/2009 07:29 AM, Dominick Grift wrote:
> On Fri, Aug 28, 2009 at 04:17:36PM -0400, Daniel J Walsh wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F12/apps_webalizer.patch
>>
>> Webalizer does not list inotify, this was caused by leaked file descriptors in either dbus or cron. Both of which have been cleaned up.
>
> how about we also add a miscfiles_read_public_files(webalizer_t)
>
> Some people want to label their webroot public_content_t (for rsync and other sharing), however if they do that then webalizer can no longer access the web content.
>
>> _______________________________________________
>> refpolicy mailing list
>> refpolicy at oss.tresys.com
>> http://oss.tresys.com/mailman/listinfo/refpolicy
>>
>> ------------------------------------------------------------------------
>>
>> _______________________________________________
>> refpolicy mailing list
>> refpolicy at oss.tresys.com
>> http://oss.tresys.com/mailman/listinfo/refpolicy
Sounds good to me.
^ permalink raw reply [flat|nested] 4+ messages in thread
* [refpolicy] apps_webalizer.patch
2009-08-28 20:17 [refpolicy] apps_webalizer.patch Daniel J Walsh
2009-08-31 11:29 ` Dominick Grift
@ 2009-09-02 13:11 ` Christopher J. PeBenito
1 sibling, 0 replies; 4+ messages in thread
From: Christopher J. PeBenito @ 2009-09-02 13:11 UTC (permalink / raw)
To: refpolicy
On Fri, 2009-08-28 at 16:17 -0400, Daniel J Walsh wrote:
> Webalizer does not list inotify, this was caused by leaked file
> descriptors in either dbus or cron. Both of which have been cleaned
> up.
Merged.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2009-09-02 13:11 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2009-08-28 20:17 [refpolicy] apps_webalizer.patch Daniel J Walsh
2009-08-31 11:29 ` Dominick Grift
2009-08-31 12:56 ` Daniel J Walsh
2009-09-02 13:11 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.