All of lore.kernel.org
 help / color / mirror / Atom feed
* [refpolicy] [PATCH 02/20] Restorecon reads, and writes /dev/console before it is properly labeled
@ 2013-09-24 13:39 Dominick Grift
  2013-09-26 12:32 ` Christopher J. PeBenito
  0 siblings, 1 reply; 2+ messages in thread
From: Dominick Grift @ 2013-09-24 13:39 UTC (permalink / raw)
  To: refpolicy

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
---
 policy/modules/system/selinuxutil.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/system/selinuxutil.te b/policy/modules/system/selinuxutil.te
index ec01d0b..5622246 100644
--- a/policy/modules/system/selinuxutil.te
+++ b/policy/modules/system/selinuxutil.te
@@ -543,6 +543,7 @@ kernel_dontaudit_list_all_proc(setfiles_t)
 kernel_dontaudit_list_all_sysctls(setfiles_t)
 
 dev_relabel_all_dev_nodes(setfiles_t)
+dev_rw_generic_chr_files(setfiles_t)
 
 domain_use_interactive_fds(setfiles_t)
 domain_dontaudit_search_all_domains_state(setfiles_t)
-- 
1.8.3.1

^ permalink raw reply related	[flat|nested] 2+ messages in thread

* [refpolicy] [PATCH 02/20] Restorecon reads, and writes /dev/console before it is properly labeled
  2013-09-24 13:39 [refpolicy] [PATCH 02/20] Restorecon reads, and writes /dev/console before it is properly labeled Dominick Grift
@ 2013-09-26 12:32 ` Christopher J. PeBenito
  0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2013-09-26 12:32 UTC (permalink / raw)
  To: refpolicy

On Tue 24 Sep 2013 09:39:07 AM EDT, Dominick Grift wrote:
> Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
> ---
>  policy/modules/system/selinuxutil.te | 1 +
>  1 file changed, 1 insertion(+)
>
> diff --git a/policy/modules/system/selinuxutil.te b/policy/modules/system/selinuxutil.te
> index ec01d0b..5622246 100644
> --- a/policy/modules/system/selinuxutil.te
> +++ b/policy/modules/system/selinuxutil.te
> @@ -543,6 +543,7 @@ kernel_dontaudit_list_all_proc(setfiles_t)
>  kernel_dontaudit_list_all_sysctls(setfiles_t)
>
>  dev_relabel_all_dev_nodes(setfiles_t)
> +dev_rw_generic_chr_files(setfiles_t)
>
>  domain_use_interactive_fds(setfiles_t)
>  domain_dontaudit_search_all_domains_state(setfiles_t)

Merged.

--
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2013-09-26 12:32 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-09-24 13:39 [refpolicy] [PATCH 02/20] Restorecon reads, and writes /dev/console before it is properly labeled Dominick Grift
2013-09-26 12:32 ` Christopher J. PeBenito

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.