[refpolicy] admin_tmpreaper.patch

[refpolicy] admin_tmpreaper.patch

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F14/admin_tmpreaper.patch

tmpreaper needs to be able to handle sandbox content



Needs to be able to delete usr_t files moved to /tmp
delete apache content.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkx20WwACgkQrlYvE4MpobN2RQCgnJcv585hPEz9A/2vrG3LQCs3
NksAoIKm55Xo44zYG9TziHeeJL34Dpxm
=r+Eg
-----END PGP SIGNATURE-----

[refpolicy] admin_tmpreaper.patch

[Daniel J Walsh]

http://people.fedoraproject.org/~dwalsh/SELinux/F14/admin_tmpreaper.patch

tmpreaper needs to be able to delete usr_t files that are moved to /tmp

Needs to delete apache content rw files
cache dirs
sandbox files

[refpolicy] admin_tmpreaper.patch

[Daniel J Walsh]

http://people.fedoraproject.org/~dwalsh/SELinux/F13/admin_tmpreaper.patch

tmpreaper lists home content in /tmp

Needs to delete apache content

Deals with rpm cache.

[refpolicy] admin_tmpreaper.patch

[Daniel J Walsh]

http://people.fedoraproject.org/~dwalsh/SELinux/F12/admin_tmpreaper.patch

Allow tmpreaper to list user homedir

Delete content that users labeled as apache content

read rpm cache.

Most of these are caused by users doing 

mv ~/FILEa /tmp

[refpolicy] admin_tmpreaper.patch

[Daniel J Walsh]

http://people.fedoraproject.org/~dwalsh/SELinux/F11/admin_tmpreaper.patch

tmpreaper needs to be able to manage and delete all sorts of files. 
Basicaly any file that can be mv'd to /tmp, tmpreaper needs to be able 
to delete and read through the directory.

[refpolicy] admin_tmpreaper.patch

[Christopher J. PeBenito]

On Thu, 2009-05-21 at 10:20 -0400, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F11/admin_tmpreaper.patch
> 
> tmpreaper needs to be able to manage and delete all sorts of files. 
> Basicaly any file that can be mv'd to /tmp, tmpreaper needs to be able 
> to delete and read through the directory.

Merged.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

[refpolicy] admin_tmpreaper.patch

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F11/admin_tmpreaper.patch

tmpreaper lists inotify

Needs to getattr all over the place,  Random files can be placed in /tmp
 via mv so needs to getattr.  user_home_t files often end up in /tmp and
should be deleted.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkmv9nYACgkQrlYvE4MpobNRGQCfSkaHK9vhne9t2FzY19kwJUSy
XT4An3ry13o59wrq0YlQab+tQYyfxBoj
=K5rr
-----END PGP SIGNATURE-----

[refpolicy] admin_tmpreaper.patch

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F10/admin_tmpreaper.patch

Lists inotify

Searcs all over for files and directories, can't tell where it is going
to look.

We have made this an unconfined_domain since it breaks and really not
worth confining.

A bunch of other domains, use tmpwatch to watch their log files

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkjvxqoACgkQrlYvE4MpobMWqgCghmN+p1x5sm1C1Shss2IP3DAm
ApsAoJtcZkEsQi50EDoUr1wojqpGgNq7
=cGRp
-----END PGP SIGNATURE-----