All of lore.kernel.org
 help / color / mirror / Atom feed
From: cpebenito@tresys.com (Christopher J. PeBenito)
To: refpolicy@oss.tresys.com
Subject: [refpolicy] ntp issue
Date: Fri, 10 Aug 2012 12:59:07 -0400	[thread overview]
Message-ID: <50253DDB.9060206@tresys.com> (raw)
In-Reply-To: <1344615611.6662.4.camel@d30.localdomain>

On 08/10/12 12:20, Dominick Grift wrote:
> I was playing with ntp_admin() and i figured out that /etc/ntp.conf is
> labeled net_conf_t. What is the rationale behind that decision, I dont
> see it?

I'd say its a mistake.

> Whatever the reason for this is, its not implemented properly. The
> net_conf_t type should not be used in the ntp.fc file.
> 
> Instead, if one really wants /etc/ntp.conf to be net_conf_t, then move
> the fc spec to sysnetwork.fc
> 
> But again i dont see why this file has to be net_conf_t. Its not good
> for ntp_admin either. I wouldnt want my ntp_admin to have access to
> net_conf_t files just so that he is able to manage ntp config files

I'm fine with a patch that makes a ntp_conf_t.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com

  reply	other threads:[~2012-08-10 16:59 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2012-08-10 16:20 [refpolicy] ntp issue Dominick Grift
2012-08-10 16:59 ` Christopher J. PeBenito [this message]
2012-08-10 19:24 ` Guido Trentalancia
2012-08-13 13:27   ` Daniel J Walsh
2012-08-13 13:31     ` Dominick Grift
2012-08-13 13:50       ` Daniel J Walsh
2012-08-15  8:49     ` Guido Trentalancia

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=50253DDB.9060206@tresys.com \
    --to=cpebenito@tresys.com \
    --cc=refpolicy@oss.tresys.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.