All of lore.kernel.org
 help / color / mirror / Atom feed
From: Daniel J Walsh <dwalsh@redhat.com>
To: Stephen Smalley <sds@tycho.nsa.gov>
Cc: Matthew Ife <deleriux@airattack-central.com>,
	SELinux <selinux@tycho.nsa.gov>
Subject: Re: As we move to systemd, we are loosing some functionality from init scripts.
Date: Fri, 15 Jul 2011 13:10:13 -0400	[thread overview]
Message-ID: <4E207475.1040909@redhat.com> (raw)
In-Reply-To: <1310647915.28361.2.camel@moss-pluto>

[-- Attachment #1: Type: text/plain, Size: 402 bytes --]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I guess we can add something like the attached, and then implement
systemd checks on these.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk4gdHEACgkQrlYvE4MpobOg3gCfU23GCTQuktksXCu6j2mGdnh0
TRUAnRRo34V3/OIxe+ikn7mFrI3sLy38
=gJiT
-----END PGP SIGNATURE-----

[-- Attachment #2: service.diff --]
[-- Type: text/x-patch, Size: 637 bytes --]

diff --git a/policy/flask/access_vectors b/policy/flask/access_vectors
index bf24160..468e0fd 100644
--- a/policy/flask/access_vectors
+++ b/policy/flask/access_vectors
@@ -862,3 +862,12 @@ inherits database
 	implement
 	execute
 }
+
+class service
+{
+	start
+	stop
+	status
+	reload
+	kill
+}
diff --git a/policy/flask/security_classes b/policy/flask/security_classes
index 14a4799..067ecfc 100644
--- a/policy/flask/security_classes
+++ b/policy/flask/security_classes
@@ -131,4 +131,8 @@ class db_view			# userspace
 class db_sequence		# userspace
 class db_language		# userspace
 
+# systemd services 
+class service 
+
+
 # FLASK

[-- Attachment #3: service.diff.sig --]
[-- Type: application/pgp-signature, Size: 72 bytes --]

      parent reply	other threads:[~2011-07-15 17:10 UTC|newest]

Thread overview: 9+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2011-07-12 21:12 As we move to systemd, we are loosing some functionality from init scripts Daniel J Walsh
2011-07-13 13:33 ` Christopher J. PeBenito
2011-07-13 13:38   ` Daniel J Walsh
2011-07-13 17:20 ` Matthew Ife
2011-07-13 17:45   ` Daniel J Walsh
2011-07-14 12:51     ` Stephen Smalley
2011-07-14 13:23       ` Russell Coker
2011-07-14 13:41         ` Stephen Smalley
2011-07-15 17:10       ` Daniel J Walsh [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4E207475.1040909@redhat.com \
    --to=dwalsh@redhat.com \
    --cc=deleriux@airattack-central.com \
    --cc=sds@tycho.nsa.gov \
    --cc=selinux@tycho.nsa.gov \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.