All of lore.kernel.org
 help / color / mirror / Atom feed
* [refpolicy] services_rtkit.patch
@ 2010-02-23 20:49 Daniel J Walsh
  0 siblings, 0 replies; 2+ messages in thread
From: Daniel J Walsh @ 2010-02-23 20:49 UTC (permalink / raw)
  To: refpolicy

http://people.fedoraproject.org/~dwalsh/SELinux/F13/services_rtkit.patch

rtkit_daemon_system_domain interface allows domains to say rtkit can 
setsched on their process.

+    rtkit_daemon_system_domain(pulseaudio_t)
+    rtkit_daemon_system_domain(staff_t)
+        rtkit_daemon_system_domain(unconfined_usertype)
+    rtkit_daemon_system_domain(user_t)
+         rtkit_daemon_system_domain(icecast_t)
+interface(`rtkit_daemon_system_domain',`
+    rtkit_daemon_system_domain(xdm_t)
+        rtkit_daemon_system_domain(initrc_t)
+        rtkit_daemon_system_domain($1_usertype)


Needs sys_nice capability
Needs to getsched on all domains.

Fix bug in te file

^ permalink raw reply	[flat|nested] 2+ messages in thread
* [refpolicy] services_rtkit.patch
@ 2010-08-26 22:18 Daniel J Walsh
  0 siblings, 0 replies; 2+ messages in thread
From: Daniel J Walsh @ 2010-08-26 22:18 UTC (permalink / raw)
  To: refpolicy

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F14/services_rtkit.patch

stop confined users from dbus chatting
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkx26EgACgkQrlYvE4MpobMEygCcD0GaKzEjaQoSvXyH7rLhUj/1
y9IAn15Z6njpg+84O3rxINRhJWGrX9Mb
=2Qds
-----END PGP SIGNATURE-----

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2010-08-26 22:18 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2010-02-23 20:49 [refpolicy] services_rtkit.patch Daniel J Walsh
  -- strict thread matches above, loose matches on Subject: below --
2010-08-26 22:18 Daniel J Walsh

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.