From: Dave Airlie <airlied@gmail.com>
To: Stephen Smalley <sds@tycho.nsa.gov>
Cc: Andrew Morton <akpm@osdl.org>, James Morris <jmorris@redhat.com>,
lkml <linux-kernel@vger.kernel.org>,
Dave Jones <davej@redhat.com>
Subject: Re: [PATCH][SELINUX] Add name_connect permission check
Date: Sun, 3 Apr 2005 19:36:42 +1000 [thread overview]
Message-ID: <21d7e99705040301366b1064b6@mail.gmail.com> (raw)
In-Reply-To: <1111588875.21107.69.camel@moss-spartans.epoch.ncsc.mil>
On Mar 24, 2005 12:41 AM, Stephen Smalley <sds@tycho.nsa.gov> wrote:
> On Wed, 2005-03-23 at 09:40 -0500, Stephen Smalley wrote:
> > This patch adds a name_connect permission check to SELinux to provide
> > control over outbound TCP connections to particular ports distinct
> > from the general controls over sending and receiving packets. Please
> > apply.
> >
On a standard FC3 with selinux enabled, booting the latest -bk breaks
all my outgoing TCP connections at a guess due to this patch.. this
probably isn't something that people really want to happen.. or maybe
Fedora can release an updated policy to deal with it?
Dave.
next prev parent reply other threads:[~2005-04-03 9:36 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-03-23 14:40 [PATCH][SELINUX] Add name_connect permission check Stephen Smalley
2005-03-23 14:41 ` Stephen Smalley
2005-04-03 9:36 ` Dave Airlie [this message]
2005-04-04 4:10 ` James Morris
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=21d7e99705040301366b1064b6@mail.gmail.com \
--to=airlied@gmail.com \
--cc=akpm@osdl.org \
--cc=davej@redhat.com \
--cc=jmorris@redhat.com \
--cc=linux-kernel@vger.kernel.org \
--cc=sds@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox