* [refpolicy] services_samba.patch
@ 2010-08-26 22:19 Daniel J Walsh
0 siblings, 0 replies; 6+ messages in thread
From: Daniel J Walsh @ 2010-08-26 22:19 UTC (permalink / raw)
To: refpolicy
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
http://people.fedoraproject.org/~dwalsh/SELinux/F14/services_samba.patch
Lots of fixes
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkx26FkACgkQrlYvE4MpobMrpQCgvFCbY/Fq0OU1x6HDRf7wdH0S
OUQAnivPVvYcrMJ6JeDlVdT8B8d3fpqI
=I0Fp
-----END PGP SIGNATURE-----
^ permalink raw reply [flat|nested] 6+ messages in thread
* [refpolicy] services_samba.patch
@ 2010-02-23 22:18 Daniel J Walsh
2010-04-16 19:04 ` Jeremy Solt
0 siblings, 1 reply; 6+ messages in thread
From: Daniel J Walsh @ 2010-02-23 22:18 UTC (permalink / raw)
To: refpolicy
http://people.fedoraproject.org/~dwalsh/SELinux/F13/services_samba.patch
^ permalink raw reply [flat|nested] 6+ messages in thread
* [refpolicy] services_samba.patch
2010-02-23 22:18 Daniel J Walsh
@ 2010-04-16 19:04 ` Jeremy Solt
0 siblings, 0 replies; 6+ messages in thread
From: Jeremy Solt @ 2010-04-16 19:04 UTC (permalink / raw)
To: refpolicy
On Tue, 2010-02-23 at 18:18 -0400, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F13/services_samba.patch
> optional_policy(`
> + type samba_unconfined_net_t;
> + domain_type(samba_unconfined_net_t)
> + domain_entry_file(samba_unconfined_net_t, samba_net_exec_t)
> + role system_r types samba_unconfined_net_t;
> +
> + unconfined_domain(samba_unconfined_net_t)
> +
> + manage_files_pattern(samba_unconfined_net_t, samba_etc_t, samba_secrets_t)
> + filetrans_pattern(samba_unconfined_net_t, samba_etc_t, samba_secrets_t, file)
> + userdom_use_user_terminals(samba_unconfined_net_t)
> +')
> +
> type samba_unconfined_script_t;
> type samba_unconfined_script_exec_t;
> domain_type(samba_unconfined_script_t)
> @@ -876,9 +943,12 @@
> allow smbd_t samba_unconfined_script_exec_t:dir search_dir_perms;
> allow smbd_t samba_unconfined_script_exec_t:file ioctl;
>
> +optional_policy(`
> unconfined_domain(samba_unconfined_script_t)
> +')
>
> tunable_policy(`samba_run_unconfined',`
> domtrans_pattern(smbd_t, samba_unconfined_script_exec_t, samba_unconfined_script_t)
> - ')
> +',`
> + can_exec(smbd_t, samba_unconfined_script_exec_t)
> ')
What are you trying to do here? The tabbing makes this unclear.
--
Jeremy J. Solt
Tresys Technology, LLC
410-290-1411 x122
>
^ permalink raw reply [flat|nested] 6+ messages in thread
* [refpolicy] services_samba.patch
@ 2009-11-12 21:57 Daniel J Walsh
0 siblings, 0 replies; 6+ messages in thread
From: Daniel J Walsh @ 2009-11-12 21:57 UTC (permalink / raw)
To: refpolicy
http://people.fedoraproject.org/~dwalsh/SELinux/F12/services_samba.patch
Lots of fixes.
^ permalink raw reply [flat|nested] 6+ messages in thread
* [refpolicy] services_samba.patch
@ 2009-06-09 1:05 Daniel J Walsh
0 siblings, 0 replies; 6+ messages in thread
From: Daniel J Walsh @ 2009-06-09 1:05 UTC (permalink / raw)
To: refpolicy
http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_samba.patch
Lots of fixes for samba
^ permalink raw reply [flat|nested] 6+ messages in thread
* [refpolicy] services_samba.patch
@ 2008-10-14 19:43 Daniel J Walsh
0 siblings, 0 replies; 6+ messages in thread
From: Daniel J Walsh @ 2008-10-14 19:43 UTC (permalink / raw)
To: refpolicy
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
http://people.fedoraproject.org/~dwalsh/SELinux/F10/services_samba.patch
Add init scripts
Add policy for smbcontrol
Allow the running of unconfined scripts
Allow unconfined_t to run net in an unconfined domain, but make sure
proper transitions happen
Other fixes to interfaces
Add template for helper domain to be used in place of unconfined scripts
Allow users to label file systems as samba_share_t
Lots and lots of fixes....
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iEYEARECAAYFAkj09nQACgkQrlYvE4MpobP6RQCfSYhbV/Prsd2UX0oCScKijwmj
3nkAoI3jY4dIjRNTFDgN7gLTMBcmN0Pd
=afwE
-----END PGP SIGNATURE-----
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2010-08-26 22:19 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2010-08-26 22:19 [refpolicy] services_samba.patch Daniel J Walsh
-- strict thread matches above, loose matches on Subject: below --
2010-02-23 22:18 Daniel J Walsh
2010-04-16 19:04 ` Jeremy Solt
2009-11-12 21:57 Daniel J Walsh
2009-06-09 1:05 Daniel J Walsh
2008-10-14 19:43 Daniel J Walsh
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.