All of lore.kernel.org
 help / color / mirror / Atom feed
* [refpolicy] Make refpolicy aware of the secure_firmware avperm of the capability2 security class
@ 2012-09-08  8:33 Dominick Grift
  2012-09-10 14:50 ` Stephen Smalley
  0 siblings, 1 reply; 3+ messages in thread
From: Dominick Grift @ 2012-09-08  8:33 UTC (permalink / raw)
  To: refpolicy

Can we define that in refpolicy because vbetool needs it

http://git.fedorahosted.org/cgit/selinux-policy.git/commit/?h=master_contrib&id=ede99cf27691bc1f3ddb95059388315f31c5210b

^ permalink raw reply	[flat|nested] 3+ messages in thread

* [refpolicy] Make refpolicy aware of the secure_firmware avperm of the capability2 security class
  2012-09-08  8:33 [refpolicy] Make refpolicy aware of the secure_firmware avperm of the capability2 security class Dominick Grift
@ 2012-09-10 14:50 ` Stephen Smalley
  2012-09-10 14:59   ` Christopher J. PeBenito
  0 siblings, 1 reply; 3+ messages in thread
From: Stephen Smalley @ 2012-09-10 14:50 UTC (permalink / raw)
  To: refpolicy

On Sat, 2012-09-08 at 10:33 +0200, Dominick Grift wrote:
> Can we define that in refpolicy because vbetool needs it
> 
> http://git.fedorahosted.org/cgit/selinux-policy.git/commit/?h=master_contrib&id=ede99cf27691bc1f3ddb95059388315f31c5210b

Not until it gets defined in the mainline kernel.  Discussions on lkml
suggest that it won't have that name if/when it gets merged.

-- 
Stephen Smalley
National Security Agency

^ permalink raw reply	[flat|nested] 3+ messages in thread

* [refpolicy] Make refpolicy aware of the secure_firmware avperm of the capability2 security class
  2012-09-10 14:50 ` Stephen Smalley
@ 2012-09-10 14:59   ` Christopher J. PeBenito
  0 siblings, 0 replies; 3+ messages in thread
From: Christopher J. PeBenito @ 2012-09-10 14:59 UTC (permalink / raw)
  To: refpolicy

On 09/10/12 10:50, Stephen Smalley wrote:
> On Sat, 2012-09-08 at 10:33 +0200, Dominick Grift wrote:
>> Can we define that in refpolicy because vbetool needs it
>>
>> http://git.fedorahosted.org/cgit/selinux-policy.git/commit/?h=master_contrib&id=ede99cf27691bc1f3ddb95059388315f31c5210b
> 
> Not until it gets defined in the mainline kernel.  Discussions on lkml
> suggest that it won't have that name if/when it gets merged.
 
Agreed.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com

^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2012-09-10 14:59 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2012-09-08  8:33 [refpolicy] Make refpolicy aware of the secure_firmware avperm of the capability2 security class Dominick Grift
2012-09-10 14:50 ` Stephen Smalley
2012-09-10 14:59   ` Christopher J. PeBenito

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.