* [refpolicy] system_fstools.patch
@ 2009-03-05 17:14 Daniel J Walsh
2009-04-03 14:42 ` Christopher J. PeBenito
0 siblings, 1 reply; 7+ messages in thread
From: Daniel J Walsh @ 2009-03-05 17:14 UTC (permalink / raw)
To: refpolicy
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
http://people.fedoraproject.org/~dwalsh/SELinux/F11/system_fstools.patch
Remove label for badblocks and mkswap no need to transition
fsadm creates files in nfs and cifs directories
Uses terminals
We run it unconfined
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iEYEARECAAYFAkmwCGMACgkQrlYvE4MpobPs1gCdHCz2XzM4mh51kuKQ8B6buwWM
eRoAnRs6hFnOEXZZm5CFPgU1IcLTnxak
=gM6N
-----END PGP SIGNATURE-----
^ permalink raw reply [flat|nested] 7+ messages in thread
* [refpolicy] system_fstools.patch
2009-03-05 17:14 Daniel J Walsh
@ 2009-04-03 14:42 ` Christopher J. PeBenito
2009-04-03 20:17 ` Daniel J Walsh
0 siblings, 1 reply; 7+ messages in thread
From: Christopher J. PeBenito @ 2009-04-03 14:42 UTC (permalink / raw)
To: refpolicy
On Thu, 2009-03-05 at 13:14 -0400, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F11/system_fstools.patch
>
> Remove label for badblocks and mkswap no need to transition
Still dropping this block.
> fsadm creates files in nfs and cifs directories
Why?
> Uses terminals
Why are all terminals needed? Console and user terminals should be
sufficient.
> We run it unconfined
moved this to distro_redhat
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
^ permalink raw reply [flat|nested] 7+ messages in thread
* [refpolicy] system_fstools.patch
2009-04-03 14:42 ` Christopher J. PeBenito
@ 2009-04-03 20:17 ` Daniel J Walsh
0 siblings, 0 replies; 7+ messages in thread
From: Daniel J Walsh @ 2009-04-03 20:17 UTC (permalink / raw)
To: refpolicy
On 04/03/2009 10:42 AM, Christopher J. PeBenito wrote:
> On Thu, 2009-03-05 at 13:14 -0400, Daniel J Walsh wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F11/system_fstools.patch
>>
>> Remove label for badblocks and mkswap no need to transition
>
> Still dropping this block.
>
>> fsadm creates files in nfs and cifs directories
>
Building a kernel or other packages in a nfs and cifs environment
involes fsadm tools writing to these directories I believe.
> Why?
>
>> Uses terminals
>
If one of these tools runs during boot it will write to a tty_device_t.
> Why are all terminals needed? Console and user terminals should be
> sufficient.
>
>> We run it unconfined
>
> moved this to distro_redhat
>
^ permalink raw reply [flat|nested] 7+ messages in thread
* [refpolicy] system_fstools.patch
@ 2009-11-12 22:08 Daniel J Walsh
2009-11-25 15:27 ` Christopher J. PeBenito
0 siblings, 1 reply; 7+ messages in thread
From: Daniel J Walsh @ 2009-11-12 22:08 UTC (permalink / raw)
To: refpolicy
http://people.fedoraproject.org/~dwalsh/SELinux/F12/system_fstools.patch
New executables labels
^ permalink raw reply [flat|nested] 7+ messages in thread
* [refpolicy] system_fstools.patch
2009-11-12 22:08 Daniel J Walsh
@ 2009-11-25 15:27 ` Christopher J. PeBenito
0 siblings, 0 replies; 7+ messages in thread
From: Christopher J. PeBenito @ 2009-11-25 15:27 UTC (permalink / raw)
To: refpolicy
On Thu, 2009-11-12 at 17:08 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F12/system_fstools.patch
>
> New executables labels
>
Merged.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
^ permalink raw reply [flat|nested] 7+ messages in thread
* [refpolicy] system_fstools.patch
@ 2010-02-23 21:09 Daniel J Walsh
0 siblings, 0 replies; 7+ messages in thread
From: Daniel J Walsh @ 2010-02-23 21:09 UTC (permalink / raw)
To: refpolicy
http://people.fedoraproject.org/~dwalsh/SELinux/F13/system_fstools.patch
Do not want to confine badblocks and mkswap
New label for mke4fs and clubuffflush
Need to manage nfs and cifs files
^ permalink raw reply [flat|nested] 7+ messages in thread
* [refpolicy] system_fstools.patch
@ 2010-08-26 23:31 Daniel J Walsh
0 siblings, 0 replies; 7+ messages in thread
From: Daniel J Walsh @ 2010-08-26 23:31 UTC (permalink / raw)
To: refpolicy
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
http://people.fedoraproject.org/~dwalsh/SELinux/F14/system_fstools.patch
fstools should not includ mkswap or badblocks
fsadm can manage nfs and cifs files. Ask kernel to load modules
Reads svirt images.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkx2+VcACgkQrlYvE4MpobNbtACfTNfygvxcKFnsWdJav+Z/ZgXF
X6EAoJl5+o94hMAdyKpnT5ySh7W8w9df
=XXf+
-----END PGP SIGNATURE-----
^ permalink raw reply [flat|nested] 7+ messages in thread
end of thread, other threads:[~2010-08-26 23:31 UTC | newest]
Thread overview: 7+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2010-02-23 21:09 [refpolicy] system_fstools.patch Daniel J Walsh
-- strict thread matches above, loose matches on Subject: below --
2010-08-26 23:31 Daniel J Walsh
2009-11-12 22:08 Daniel J Walsh
2009-11-25 15:27 ` Christopher J. PeBenito
2009-03-05 17:14 Daniel J Walsh
2009-04-03 14:42 ` Christopher J. PeBenito
2009-04-03 20:17 ` Daniel J Walsh
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.