* [refpolicy] admin_readahead.patch
@ 2008-09-24 20:53 Daniel J Walsh
2008-10-06 17:31 ` Christopher J. PeBenito
0 siblings, 1 reply; 10+ messages in thread
From: Daniel J Walsh @ 2008-09-24 20:53 UTC (permalink / raw)
To: refpolicy
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
http://people.fedoraproject.org/~dwalsh/SELinux/F10/admin_readahead.patch
readahead needs fowner
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iEYEARECAAYFAkjaqNAACgkQrlYvE4MpobOTZgCghke6VnVS33vNRLUkLk3V9r+X
rocAni4/8K2kPZewVYuYW4gOotR9ZmJY
=LnwD
-----END PGP SIGNATURE-----
^ permalink raw reply [flat|nested] 10+ messages in thread
* [refpolicy] admin_readahead.patch
2008-09-24 20:53 Daniel J Walsh
@ 2008-10-06 17:31 ` Christopher J. PeBenito
0 siblings, 0 replies; 10+ messages in thread
From: Christopher J. PeBenito @ 2008-10-06 17:31 UTC (permalink / raw)
To: refpolicy
On Wed, 2008-09-24 at 16:53 -0400, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F10/admin_readahead.patch
>
> readahead needs fowner
Merged.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
^ permalink raw reply [flat|nested] 10+ messages in thread
* [refpolicy] admin_readahead.patch
@ 2009-05-21 14:15 Daniel J Walsh
2009-07-28 14:08 ` Christopher J. PeBenito
0 siblings, 1 reply; 10+ messages in thread
From: Daniel J Walsh @ 2009-05-21 14:15 UTC (permalink / raw)
To: refpolicy
http://people.fedoraproject.org/~dwalsh/SELinux/F11/admin_readahead.patch
Major changes to readahead in F11,
Now has a /var/lib directory.
setsched
Remove readahead_etc_rw_t, since no file context exist for this.
Reads all sysctls
It now sets audit controls.
^ permalink raw reply [flat|nested] 10+ messages in thread
* [refpolicy] admin_readahead.patch
2009-05-21 14:15 Daniel J Walsh
@ 2009-07-28 14:08 ` Christopher J. PeBenito
0 siblings, 0 replies; 10+ messages in thread
From: Christopher J. PeBenito @ 2009-07-28 14:08 UTC (permalink / raw)
To: refpolicy
On Thu, 2009-05-21 at 10:15 -0400, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F11/admin_readahead.patch
>
> Major changes to readahead in F11,
>
> Now has a /var/lib directory.
>
> setsched
>
> Remove readahead_etc_rw_t, since no file context exist for this.
I made this an alias to the readahead_var_lib_t for compat.
> Reads all sysctls
>
> It now sets audit controls.
Merged.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
^ permalink raw reply [flat|nested] 10+ messages in thread
* [refpolicy] admin_readahead.patch
@ 2009-08-28 19:30 Daniel J Walsh
2009-09-09 13:48 ` Christopher J. PeBenito
0 siblings, 1 reply; 10+ messages in thread
From: Daniel J Walsh @ 2009-08-28 19:30 UTC (permalink / raw)
To: refpolicy
http://people.fedoraproject.org/~dwalsh/SELinux/F12/admin_readahead.patch
Additional rules for readahead to prevent AVC messages.
^ permalink raw reply [flat|nested] 10+ messages in thread
* [refpolicy] admin_readahead.patch
2009-08-28 19:30 Daniel J Walsh
@ 2009-09-09 13:48 ` Christopher J. PeBenito
0 siblings, 0 replies; 10+ messages in thread
From: Christopher J. PeBenito @ 2009-09-09 13:48 UTC (permalink / raw)
To: refpolicy
On Fri, 2009-08-28 at 15:30 -0400, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F12/admin_readahead.patch
>
> Additional rules for readahead to prevent AVC messages.
Merged.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
^ permalink raw reply [flat|nested] 10+ messages in thread
* [refpolicy] admin_readahead.patch
@ 2009-11-12 20:32 Daniel J Walsh
0 siblings, 0 replies; 10+ messages in thread
From: Daniel J Walsh @ 2009-11-12 20:32 UTC (permalink / raw)
To: refpolicy
http://people.fedoraproject.org/~dwalsh/SELinux/F12/admin_readahead.patch
readahead will attempt to read all files including shadow. Add dontaudit.
^ permalink raw reply [flat|nested] 10+ messages in thread
* [refpolicy] admin_readahead.patch
@ 2010-02-23 19:13 Daniel J Walsh
0 siblings, 0 replies; 10+ messages in thread
From: Daniel J Walsh @ 2010-02-23 19:13 UTC (permalink / raw)
To: refpolicy
http://people.fedoraproject.org/~dwalsh/SELinux/F13/admin_readahead.patch
readahead tries to read shadow, cgroups tmpfs,
^ permalink raw reply [flat|nested] 10+ messages in thread
* [refpolicy] admin_readahead.patch
@ 2010-06-02 19:52 Daniel J Walsh
0 siblings, 0 replies; 10+ messages in thread
From: Daniel J Walsh @ 2010-06-02 19:52 UTC (permalink / raw)
To: refpolicy
http://people.fedoraproject.org/~dwalsh/SELinux/F14/admin_readahead.patch
Readahead tries to read every file. Needs dontaudit rules.
I went with Domick Grift rename of /cgroup
^ permalink raw reply [flat|nested] 10+ messages in thread
* [refpolicy] admin_readahead.patch
@ 2010-08-26 20:34 Daniel J Walsh
0 siblings, 0 replies; 10+ messages in thread
From: Daniel J Walsh @ 2010-08-26 20:34 UTC (permalink / raw)
To: refpolicy
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
http://people.fedoraproject.org/~dwalsh/SELinux/F14/admin_readahead.patch
Add some dontaudit rules to prevent AVC's on boot.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkx2z+MACgkQrlYvE4MpobOUrwCdHCfeYL9v1wo0h3t5wSMwhSAi
2FQAoOhpOUZoZM432lT7PW+9E1+kTcEv
=d1XM
-----END PGP SIGNATURE-----
^ permalink raw reply [flat|nested] 10+ messages in thread
end of thread, other threads:[~2010-08-26 20:34 UTC | newest]
Thread overview: 10+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2010-08-26 20:34 [refpolicy] admin_readahead.patch Daniel J Walsh
-- strict thread matches above, loose matches on Subject: below --
2010-06-02 19:52 Daniel J Walsh
2010-02-23 19:13 Daniel J Walsh
2009-11-12 20:32 Daniel J Walsh
2009-08-28 19:30 Daniel J Walsh
2009-09-09 13:48 ` Christopher J. PeBenito
2009-05-21 14:15 Daniel J Walsh
2009-07-28 14:08 ` Christopher J. PeBenito
2008-09-24 20:53 Daniel J Walsh
2008-10-06 17:31 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.