* [refpolicy] system_authlogin.patch
@ 2010-08-26 23:28 Daniel J Walsh
0 siblings, 0 replies; 6+ messages in thread
From: Daniel J Walsh @ 2010-08-26 23:28 UTC (permalink / raw)
To: refpolicy
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
http://people.fedoraproject.org/~dwalsh/SELinux/F14/system_authlogin.patch
Lots of changes to auth. cherry pick the ones you want.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkx2+K8ACgkQrlYvE4MpobOEYwCg4MHXH39blDwrFNn+3qKDI/qw
iR4An2iSjj3e/lEzSGas3ugBGs8TTWTY
=GPss
-----END PGP SIGNATURE-----
^ permalink raw reply [flat|nested] 6+ messages in thread
* [refpolicy] system_authlogin.patch
@ 2010-02-23 22:15 Daniel J Walsh
0 siblings, 0 replies; 6+ messages in thread
From: Daniel J Walsh @ 2010-02-23 22:15 UTC (permalink / raw)
To: refpolicy
http://people.fedoraproject.org/~dwalsh/SELinux/F13/system_authlogin.patch
Not much new since the last time I sent this.
^ permalink raw reply [flat|nested] 6+ messages in thread
* [refpolicy] system_authlogin.patch
@ 2009-11-12 22:07 Daniel J Walsh
2010-02-12 20:06 ` Christopher J. PeBenito
0 siblings, 1 reply; 6+ messages in thread
From: Daniel J Walsh @ 2009-11-12 22:07 UTC (permalink / raw)
To: refpolicy
http://people.fedoraproject.org/~dwalsh/SELinux/F12/system_authlogin.patch
Lots of new authlogin policy.
^ permalink raw reply [flat|nested] 6+ messages in thread
* [refpolicy] system_authlogin.patch
2009-11-12 22:07 Daniel J Walsh
@ 2010-02-12 20:06 ` Christopher J. PeBenito
2010-02-13 12:22 ` Daniel J Walsh
0 siblings, 1 reply; 6+ messages in thread
From: Christopher J. PeBenito @ 2010-02-12 20:06 UTC (permalink / raw)
To: refpolicy
On Thu, 2009-11-12 at 17:07 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F12/system_authlogin.patch
>
> Lots of new authlogin policy.
I like the idea of having interfaces for using pam, but I'm hesitant
because each program's usage of pam can vary based on the pam.d entries.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
^ permalink raw reply [flat|nested] 6+ messages in thread
* [refpolicy] system_authlogin.patch
2010-02-12 20:06 ` Christopher J. PeBenito
@ 2010-02-13 12:22 ` Daniel J Walsh
2010-02-16 13:56 ` Christopher J. PeBenito
0 siblings, 1 reply; 6+ messages in thread
From: Daniel J Walsh @ 2010-02-13 12:22 UTC (permalink / raw)
To: refpolicy
On 02/12/2010 03:06 PM, Christopher J. PeBenito wrote:
> On Thu, 2009-11-12 at 17:07 -0500, Daniel J Walsh wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F12/system_authlogin.patch
>>
>> Lots of new authlogin policy.
>
> I like the idea of having interfaces for using pam, but I'm hesitant
> because each program's usage of pam can vary based on the pam.d entries.
>
Yes, and I think we could add a series of booleans to allow people to tighten this up.
I guess this comes down to an argument between least privs and just make the damn thing work.
^ permalink raw reply [flat|nested] 6+ messages in thread
* [refpolicy] system_authlogin.patch
2010-02-13 12:22 ` Daniel J Walsh
@ 2010-02-16 13:56 ` Christopher J. PeBenito
0 siblings, 0 replies; 6+ messages in thread
From: Christopher J. PeBenito @ 2010-02-16 13:56 UTC (permalink / raw)
To: refpolicy
On Sat, 2010-02-13 at 07:22 -0500, Daniel J Walsh wrote:
> On 02/12/2010 03:06 PM, Christopher J. PeBenito wrote:
> > On Thu, 2009-11-12 at 17:07 -0500, Daniel J Walsh wrote:
> >> http://people.fedoraproject.org/~dwalsh/SELinux/F12/system_authlogin.patch
> >>
> >> Lots of new authlogin policy.
> >
> > I like the idea of having interfaces for using pam, but I'm hesitant
> > because each program's usage of pam can vary based on the pam.d entries.
> >
> Yes, and I think we could add a series of booleans to allow people to tighten this up.
> I guess this comes down to an argument between least privs and just make the damn thing work.
Right. I just don't know how much variation between pam configurations
there is on a particular system.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2010-08-26 23:28 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2010-08-26 23:28 [refpolicy] system_authlogin.patch Daniel J Walsh
-- strict thread matches above, loose matches on Subject: below --
2010-02-23 22:15 Daniel J Walsh
2009-11-12 22:07 Daniel J Walsh
2010-02-12 20:06 ` Christopher J. PeBenito
2010-02-13 12:22 ` Daniel J Walsh
2010-02-16 13:56 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.