[refpolicy] system_fstools.patch

All of lore.kernel.org
 help / color / mirror / Atom feed

* [refpolicy] system_fstools.patch
@ 2009-11-12 22:08 Daniel J Walsh
  2009-11-25 15:27 ` Christopher J. PeBenito
  0 siblings, 1 reply; 7+ messages in thread
From: Daniel J Walsh @ 2009-11-12 22:08 UTC (permalink / raw)
  To: refpolicy

http://people.fedoraproject.org/~dwalsh/SELinux/F12/system_fstools.patch

New executables labels

^ permalink raw reply	[flat|nested] 7+ messages in thread

* [refpolicy] system_fstools.patch
  2009-11-12 22:08 [refpolicy] system_fstools.patch Daniel J Walsh
@ 2009-11-25 15:27 ` Christopher J. PeBenito
  0 siblings, 0 replies; 7+ messages in thread
From: Christopher J. PeBenito @ 2009-11-25 15:27 UTC (permalink / raw)
  To: refpolicy

On Thu, 2009-11-12 at 17:08 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F12/system_fstools.patch
> 
> New executables labels
> 
Merged.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

^ permalink raw reply	[flat|nested] 7+ messages in thread

* [refpolicy] system_fstools.patch
@ 2010-08-26 23:31 Daniel J Walsh
  0 siblings, 0 replies; 7+ messages in thread
From: Daniel J Walsh @ 2010-08-26 23:31 UTC (permalink / raw)
  To: refpolicy

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F14/system_fstools.patch

fstools should not includ mkswap or badblocks

fsadm can manage nfs and cifs files.  Ask kernel to load modules



Reads svirt images.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkx2+VcACgkQrlYvE4MpobNbtACfTNfygvxcKFnsWdJav+Z/ZgXF
X6EAoJl5+o94hMAdyKpnT5ySh7W8w9df
=XXf+
-----END PGP SIGNATURE-----

^ permalink raw reply	[flat|nested] 7+ messages in thread

* [refpolicy] system_fstools.patch
@ 2010-02-23 21:09 Daniel J Walsh
  0 siblings, 0 replies; 7+ messages in thread
From: Daniel J Walsh @ 2010-02-23 21:09 UTC (permalink / raw)
  To: refpolicy

http://people.fedoraproject.org/~dwalsh/SELinux/F13/system_fstools.patch

Do not want to confine badblocks  and mkswap

New label for mke4fs and clubuffflush

Need to manage nfs and cifs files

^ permalink raw reply	[flat|nested] 7+ messages in thread

* [refpolicy] system_fstools.patch
@ 2009-03-05 17:14 Daniel J Walsh
  2009-04-03 14:42 ` Christopher J. PeBenito
  0 siblings, 1 reply; 7+ messages in thread
From: Daniel J Walsh @ 2009-03-05 17:14 UTC (permalink / raw)
  To: refpolicy

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F11/system_fstools.patch

Remove label for badblocks and mkswap no need to transition

fsadm creates files in nfs and cifs directories

Uses terminals

We run it unconfined
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkmwCGMACgkQrlYvE4MpobPs1gCdHCz2XzM4mh51kuKQ8B6buwWM
eRoAnRs6hFnOEXZZm5CFPgU1IcLTnxak
=gM6N
-----END PGP SIGNATURE-----

^ permalink raw reply	[flat|nested] 7+ messages in thread

* [refpolicy] system_fstools.patch
  2009-03-05 17:14 Daniel J Walsh
@ 2009-04-03 14:42 ` Christopher J. PeBenito
  2009-04-03 20:17   ` Daniel J Walsh
  0 siblings, 1 reply; 7+ messages in thread
From: Christopher J. PeBenito @ 2009-04-03 14:42 UTC (permalink / raw)
  To: refpolicy

On Thu, 2009-03-05 at 13:14 -0400, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F11/system_fstools.patch
> 
> Remove label for badblocks and mkswap no need to transition

Still dropping this block.

> fsadm creates files in nfs and cifs directories

Why?

> Uses terminals

Why are all terminals needed?  Console and user terminals should be
sufficient.

> We run it unconfined

moved this to distro_redhat

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

^ permalink raw reply	[flat|nested] 7+ messages in thread

* [refpolicy] system_fstools.patch
  2009-04-03 14:42 ` Christopher J. PeBenito
@ 2009-04-03 20:17   ` Daniel J Walsh
  0 siblings, 0 replies; 7+ messages in thread
From: Daniel J Walsh @ 2009-04-03 20:17 UTC (permalink / raw)
  To: refpolicy

On 04/03/2009 10:42 AM, Christopher J. PeBenito wrote:
> On Thu, 2009-03-05 at 13:14 -0400, Daniel J Walsh wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F11/system_fstools.patch
>>
>> Remove label for badblocks and mkswap no need to transition
>
> Still dropping this block.
>
>> fsadm creates files in nfs and cifs directories
>
Building a kernel or other packages in a nfs and cifs environment 
involes fsadm tools writing to these directories I believe.

> Why?
>
>> Uses terminals
>
If one of these tools runs during boot it will write to a tty_device_t.

> Why are all terminals needed?  Console and user terminals should be
> sufficient.
>
>> We run it unconfined
>
> moved this to distro_redhat
>

^ permalink raw reply	[flat|nested] 7+ messages in thread

end of thread, other threads:[~2010-08-26 23:31 UTC | newest]

Thread overview: 7+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2009-11-12 22:08 [refpolicy] system_fstools.patch Daniel J Walsh
2009-11-25 15:27 ` Christopher J. PeBenito
  -- strict thread matches above, loose matches on Subject: below --
2010-08-26 23:31 Daniel J Walsh
2010-02-23 21:09 Daniel J Walsh
2009-03-05 17:14 Daniel J Walsh
2009-04-03 14:42 ` Christopher J. PeBenito
2009-04-03 20:17   ` Daniel J Walsh

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.