All of lore.kernel.org
 help / color / mirror / Atom feed
From: dwalsh@redhat.com (Daniel J Walsh)
To: refpolicy@oss.tresys.com
Subject: [refpolicy] [PATCH 1/1] Mount output should be writeable to puppet_tmp_t
Date: Tue, 27 Sep 2011 14:03:29 -0400	[thread overview]
Message-ID: <4E820FF1.1070803@redhat.com> (raw)
In-Reply-To: <20110927164054.GC17946@siphos.be>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 09/27/2011 12:40 PM, Sven Vermeulen wrote:
> On Tue, Sep 27, 2011 at 09:29:58AM -0400, Christopher J. PeBenito
> wrote:
>>>> Well, the way puppet should manage anything selinux related
>>>> should be though packages I think.  For instance, I have
>>>> puppet set up to install selinux-nginx on gentoo.  Then if I
>>>> place a file via puppet it gets relabeled automatically via
>>>> the file context.
>> 
>> I assume either it is installed correctly with setfscreatecon()
>> or you run restorecon on it?
> 
> Puppet is SELinux-aware (at least it is build with libselinux.so
> references) so I guess it is the former.
> 
> Wkr, Sven Vermeulen
> 
> _______________________________________________ refpolicy mailing
> list refpolicy at oss.tresys.com 
> http://oss.tresys.com/mailman/listinfo/refpolicy
Yes puppet was made Somewhat SELinux aware. It can do most of the
stuff you would expect with libselinux, but not the stuff that
libsemanage does.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk6CD/EACgkQrlYvE4MpobMGWACeOoUre+aA8drmZoP4qgNA5s9H
W3AAoIxL8VMIpB/fV3jcCtQMsx/jo0Xf
=jsKB
-----END PGP SIGNATURE-----

      reply	other threads:[~2011-09-27 18:03 UTC|newest]

Thread overview: 19+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2011-09-24 13:56 [refpolicy] [PATCH 1/1] Mount output should be writeable to puppet_tmp_t Sven Vermeulen
2011-09-24 15:18 ` Dominick Grift
2011-09-24 15:22   ` Dominick Grift
2011-09-26 13:12     ` Daniel J Walsh
2011-09-26 14:22       ` Sven Vermeulen
2011-09-26 15:01         ` Daniel J Walsh
2011-09-26 15:11           ` Dominick Grift
2011-09-26 15:41             ` Daniel J Walsh
2011-09-26 18:31               ` Christopher J. PeBenito
2011-09-26 19:36                 ` Matt Thode
2011-09-27 12:59                   ` Daniel J Walsh
2011-09-27 13:17                     ` Matt Thode
2011-09-27 13:29                     ` Christopher J. PeBenito
2011-09-27 14:58                       ` Daniel J Walsh
2011-09-27 15:57                         ` Christopher J. PeBenito
2011-09-27 16:37                         ` Dominick Grift
2011-09-27 18:06                           ` Daniel J Walsh
2011-09-27 16:40                       ` Sven Vermeulen
2011-09-27 18:03                         ` Daniel J Walsh [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4E820FF1.1070803@redhat.com \
    --to=dwalsh@redhat.com \
    --cc=refpolicy@oss.tresys.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.