* [refpolicy] apps_wm.patch @ 2010-06-02 20:16 Daniel J Walsh 2010-06-25 13:01 ` Christopher J. PeBenito 0 siblings, 1 reply; 8+ messages in thread From: Daniel J Walsh @ 2010-06-02 20:16 UTC (permalink / raw) To: refpolicy http://people.fedoraproject.org/~dwalsh/SELinux/F14/apps_wm.patch Window manager policy changes needed for MLS policy. ^ permalink raw reply [flat|nested] 8+ messages in thread
* [refpolicy] apps_wm.patch 2010-06-02 20:16 [refpolicy] apps_wm.patch Daniel J Walsh @ 2010-06-25 13:01 ` Christopher J. PeBenito 0 siblings, 0 replies; 8+ messages in thread From: Christopher J. PeBenito @ 2010-06-25 13:01 UTC (permalink / raw) To: refpolicy On Wed, 2010-06-02 at 16:16 -0400, Daniel J Walsh wrote: > http://people.fedoraproject.org/~dwalsh/SELinux/F14/apps_wm.patch > > Window manager policy changes needed for MLS policy. Merged. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com ^ permalink raw reply [flat|nested] 8+ messages in thread
* [refpolicy] apps_wm.patch @ 2010-08-26 22:44 Daniel J Walsh 0 siblings, 0 replies; 8+ messages in thread From: Daniel J Walsh @ 2010-08-26 22:44 UTC (permalink / raw) To: refpolicy -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 http://people.fedoraproject.org/~dwalsh/SELinux/F14/apps_wm.patch Allow window manager to make home files. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkx27mQACgkQrlYvE4MpobP71wCgkAhT72fkzmFnsQaPehYnBTcU 5sgAn0NViWvFQn+jZWFk8huCnk5LlnOh =tDHA -----END PGP SIGNATURE----- ^ permalink raw reply [flat|nested] 8+ messages in thread
* [refpolicy] apps_wm.patch @ 2009-05-21 13:59 Daniel J Walsh 2009-07-14 13:44 ` Christopher J. PeBenito 0 siblings, 1 reply; 8+ messages in thread From: Daniel J Walsh @ 2009-05-21 13:59 UTC (permalink / raw) To: refpolicy http://people.fedoraproject.org/~dwalsh/SELinux/F11/apps_wm.patch window manager policy developed by the MLS guys for handling Window Manager events in an MLS environment. ^ permalink raw reply [flat|nested] 8+ messages in thread
* [refpolicy] apps_wm.patch 2009-05-21 13:59 Daniel J Walsh @ 2009-07-14 13:44 ` Christopher J. PeBenito 2009-07-14 14:29 ` Daniel J Walsh 0 siblings, 1 reply; 8+ messages in thread From: Christopher J. PeBenito @ 2009-07-14 13:44 UTC (permalink / raw) To: refpolicy On Thu, 2009-05-21 at 09:59 -0400, Daniel J Walsh wrote: > http://people.fedoraproject.org/~dwalsh/SELinux/F11/apps_wm.patch > > window manager policy developed by the MLS guys for handling Window > Manager events in an MLS environment. This looks like should be collapsed into wm_t+ubac. -- Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150 ^ permalink raw reply [flat|nested] 8+ messages in thread
* [refpolicy] apps_wm.patch 2009-07-14 13:44 ` Christopher J. PeBenito @ 2009-07-14 14:29 ` Daniel J Walsh 2009-07-27 19:12 ` Chris PeBenito 0 siblings, 1 reply; 8+ messages in thread From: Daniel J Walsh @ 2009-07-14 14:29 UTC (permalink / raw) To: refpolicy On 07/14/2009 09:44 AM, Christopher J. PeBenito wrote: > On Thu, 2009-05-21 at 09:59 -0400, Daniel J Walsh wrote: >> http://people.fedoraproject.org/~dwalsh/SELinux/F11/apps_wm.patch >> >> window manager policy developed by the MLS guys for handling Window >> Manager events in an MLS environment. > > This looks like should be collapsed into wm_t+ubac. > I am not sure you can because you need calls like corecmd_bin_domtrans(guest_wm_t, guest_t) corecmd_shell_domtrans(guest_wm_t, guest_t) guest_t -> wm_exec_t -> guest_wm_t -> bin_t -> guest_t Similar to what we have with dbus. ^ permalink raw reply [flat|nested] 8+ messages in thread
* [refpolicy] apps_wm.patch 2009-07-14 14:29 ` Daniel J Walsh @ 2009-07-27 19:12 ` Chris PeBenito 0 siblings, 0 replies; 8+ messages in thread From: Chris PeBenito @ 2009-07-27 19:12 UTC (permalink / raw) To: refpolicy On Tue, 2009-07-14 at 10:29 -0400, Daniel J Walsh wrote: > On 07/14/2009 09:44 AM, Christopher J. PeBenito wrote: > > On Thu, 2009-05-21 at 09:59 -0400, Daniel J Walsh wrote: > >> http://people.fedoraproject.org/~dwalsh/SELinux/F11/apps_wm.patch > >> > >> window manager policy developed by the MLS guys for handling Window > >> Manager events in an MLS environment. > > > > This looks like should be collapsed into wm_t+ubac. > > > I am not sure you can because you need calls like > > corecmd_bin_domtrans(guest_wm_t, guest_t) > corecmd_shell_domtrans(guest_wm_t, guest_t) > > guest_t -> wm_exec_t -> guest_wm_t -> bin_t -> guest_t > > Similar to what we have with dbus. Merged. -- Chris PeBenito <pebenito@gentoo.org> Developer, Hardened Gentoo Linux Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243 Key fingerprint = B0E6 877A 883F A57A 8E6A CB00 BC8E E42D E6AF 9243 ^ permalink raw reply [flat|nested] 8+ messages in thread
* [refpolicy] apps_wm.patch @ 2009-03-05 16:20 Daniel J Walsh 0 siblings, 0 replies; 8+ messages in thread From: Daniel J Walsh @ 2009-03-05 16:20 UTC (permalink / raw) To: refpolicy -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 http://people.fedoraproject.org/~dwalsh/SELinux/F11/apps_wm.patch wm policy used in MLS machines. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iEYEARECAAYFAkmv+74ACgkQrlYvE4MpobPHKACfSREvRjP4OB7buURjiSN9nEVw Ve8AoI3jvpEDEdGxHJQT+7SFiyMTVk2f =BSep -----END PGP SIGNATURE----- ^ permalink raw reply [flat|nested] 8+ messages in thread
end of thread, other threads:[~2010-08-26 22:44 UTC | newest] Thread overview: 8+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2010-06-02 20:16 [refpolicy] apps_wm.patch Daniel J Walsh 2010-06-25 13:01 ` Christopher J. PeBenito -- strict thread matches above, loose matches on Subject: below -- 2010-08-26 22:44 Daniel J Walsh 2009-05-21 13:59 Daniel J Walsh 2009-07-14 13:44 ` Christopher J. PeBenito 2009-07-14 14:29 ` Daniel J Walsh 2009-07-27 19:12 ` Chris PeBenito 2009-03-05 16:20 Daniel J Walsh
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.