From mboxrd@z Thu Jan 1 00:00:00 1970 From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Tue, 14 Aug 2012 09:32:17 -0400 Subject: [refpolicy] [PATCH v1 0/6] Various fixes to the ntp policy module In-Reply-To: <1344855134-32212-1-git-send-email-dominick.grift@gmail.com> References: <1344855134-32212-1-git-send-email-dominick.grift@gmail.com> Message-ID: <502A5361.1050100@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 08/13/12 06:52, Dominick Grift wrote: > The previous patch was bad. > > Dominick Grift (6): > Introduce ntp_conf_t config file type and use that instead of > net_conf_t so that ntp_admin() does not need access to network > configuration to be able to manage ntpd. > There is no need for ntp_admin() to be able to get attributes of the > ntpd process. > Allow ntp_admin() to manage ntp_drift_t content. > Allow ntp_admin() to list etc_t directories to be able to list ntp > configuration content. > Use "Role allowed access." for consistency > Use permissions sets for compatibility. > > ntp.fc | 4 ++-- > ntp.if | 11 ++++++----- > ntp.te | 7 ++++++- > 3 files changed, 14 insertions(+), 8 deletions(-) > patches 1, 3-6 merged. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com