man/man8 Change SElinux to SELinux.
PATCH 1/2 man/man8 Change SElinux to SELinux.
The below patch, changes the workd SElinux to SELinux to match the rest in the policy and outside.
--- man/man8/httpd_selinux.8 | 2 +- man/man8/named_selinux.8 | 2 +- man/man8/samba_selinux.8 | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-)
man/man8/httpd_selinux.8 +1 -1
@@ -57,7 +57,7 @@ setsebool -P allow_httpd_sys_script_anon_write=1 .EE .SH BOOLEANS -SELinux policy is customizable based on least access required. SElinux can be setup to prevent certain http scripts from working. httpd policy is extremely flexible and has several booleans that allow you to manipulate the policy and run httpd with the tightest access possible. +SELinux policy is customizable based on least access required. SELinux can be setup to prevent certain http scripts from working. httpd policy is extremely flexible and has several booleans that allow you to manipulate the policy and run httpd with the tightest access possible. .PP httpd can be setup to allow cgi scripts to be executed, set httpd_enable_cgi to allow this
man/man8/named_selinux.8 +1 -1
@@ -15,7 +15,7 @@ Security-Enhanced Linux secures the named server via flexible mandatory access control. .SH BOOLEANS SELinux policy is customizable based on least access required. So by -default SElinux policy does not allow named to write master zone files. If you want to have named update the master zone files you need to set the named_write_master_zones boolean. +default SELinux policy does not allow named to write master zone files. If you want to have named update the master zone files you need to set the named_write_master_zones boolean. .EX setsebool -P named_write_master_zones 1 .EE
man/man8/samba_selinux.8 +1 -1
@@ -34,7 +34,7 @@ setsebool -P allow_smbd_anon_write=1 .SH BOOLEANS .br SELinux policy is customizable based on least access required. So by -default SElinux policy turns off SELinux sharing of home directories and +default SELinux policy turns off SELinux sharing of home directories and the use of Samba shares from a remote machine as a home directory. .TP If you are setting up this machine as a Samba server and wish to share the home directories, you need to set the samba_enable_home_dirs boolean.
Signature · 1 line
1.6.5.GIT
PATCH 2/2 policy/modules/system/lvm.te Typo change directores to directories, and also clean up a comment.
The below patch changes a typo "directores" to "directories", and also fixes a comment to sound more proper.
--- policy/modules/system/lvm.te | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)
policy/modules/system/lvm.te +2 -2
@@ -274,9 +274,9 @@ storage_relabel_fixed_disk(lvm_t) storage_dontaudit_read_removable_device(lvm_t) # LVM creates block devices in /dev/mapper or /dev/<vg> # depending on its version -# LVM(2) needs to create directores (/dev/mapper, /dev/<vg>) +# LVM(2) needs to create directories (/dev/mapper, /dev/<vg>) # and links from /dev/<vg> to /dev/mapper/<vg>-<lv> -# cjp: need create interface here for fixed disk create +# cjp: needs to create an interface here for fixed disk create storage_dev_filetrans_fixed_disk(lvm_t) # Access raw devices and old /dev/lvm (c 109,0). Is this needed? storage_manage_fixed_disk(lvm_t)
Signature · 1 line
1.6.5.GIT
PATCH 2/2 policy/modules/system/lvm.te Typo change directores to directories, and also clean up a comment.
Thanks for the two documentation patches Justin !
Regards,
Guido
Quoted 25 lines · Justin P. Mattock
The below patch changes a typo "directores" to "directories", and also fixes a comment to sound more proper.
Signed-off-by Justin P. Mattock <[email protected]>--- policy/modules/system/lvm.te | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)policy/modules/system/lvm.te +2
-2@@ -274,9 +274,9 @@ storage_relabel_fixed_disk(lvm_t) storage_dontaudit_read_removable_device(lvm_t) # LVM creates block devices in /dev/mapper or /dev/<vg> # depending on its version -# LVM(2) needs to create directores (/dev/mapper, /dev/<vg>) +# LVM(2) needs to create directories (/dev/mapper, /dev/<vg>) # and links from /dev/<vg> to /dev/mapper/<vg>-<lv> -# cjp: need create interface here for fixed disk create +# cjp: needs to create an interface here for fixed disk create storage_dev_filetrans_fixed_disk(lvm_t) # Access raw devices and old /dev/lvm (c 109,0). Is this needed? storage_manage_fixed_disk(lvm_t)
PATCH 2/2 policy/modules/system/lvm.te Typo change directores to directories, and also clean up a comment.
Quoted 5 lines · Guido Trentalancia
Thanks for the two documentation patches Justin !
Regards,
Guido
sure thing dude!!! if I see anymore Ill send them on up..
Quoted 31 lines · Justin P. Mattock
Quoted 27 lines
The below patch changes a typo "directores" to "directories", and also
fixes a comment to sound more proper.Signed-off-by Justin P. Mattock <[email protected]>---
policy/modules/system/lvm.te | 4 ++--1 files changed, 2 insertions(+), 2 deletions(-)policy/modules/system/ renamed from policy/modules/system/lvm.te +0
-0lvm.te
index 86ef2da..74e38b4 100644policy/modules/system/lvm.te +2
-2@@ -274,9 +274,9 @@ storage_relabel_fixed_disk(lvm_t) storage_dontaudit_read_removable_device(lvm_t) # LVM creates block devices in /dev/mapper or /dev/<vg> # depending on its version -# LVM(2) needs to create directores (/dev/mapper, /dev/<vg>) +# LVM(2) needs to create directories (/dev/mapper, /dev/<vg>) # and links from /dev/<vg> to /dev/mapper/<vg>-<lv> -# cjp: need create interface here for fixed disk create +# cjp: needs to create an interface here for fixed disk create storage_dev_filetrans_fixed_disk(lvm_t) # Access raw devices and old /dev/lvm (c 109,0). Is this needed? storage_manage_fixed_disk(lvm_t)
PATCH 1/2 man/man8 Change SElinux to SELinux.
In reply to Justin P. MattockQuoted 2 lines · Justin P. Mattock
The below patch, changes the workd SElinux to SELinux to match the rest in the policy and outside.
These two are merged.
Quoted 47 lines
Signed-off-by Justin P. Mattock <[email protected]>--- man/man8/httpd_selinux.8 | 2 +- man/man8/named_selinux.8 | 2 +- man/man8/samba_selinux.8 | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-)man/man8/httpd_selinux.8 +1
-1@@ -57,7 +57,7 @@ setsebool -P allow_httpd_sys_script_anon_write=1 .EE .SH BOOLEANS -SELinux policy is customizable based on least access required. SElinux can be setup to prevent certain http scripts from working. httpd policy is extremely flexible and has several booleans that allow you to manipulate the policy and run httpd with the tightest access possible. +SELinux policy is customizable based on least access required. SELinux can be setup to prevent certain http scripts from working. httpd policy is extremely flexible and has several booleans that allow you to manipulate the policy and run httpd with the tightest access possible. .PP httpd can be setup to allow cgi scripts to be executed, set httpd_enable_cgi to allow thisman/man8/named_selinux.8 +1
-1@@ -15,7 +15,7 @@ Security-Enhanced Linux secures the named server via flexible mandatory access control. .SH BOOLEANS SELinux policy is customizable based on least access required. So by -default SElinux policy does not allow named to write master zone files. If you want to have named update the master zone files you need to set the named_write_master_zones boolean. +default SELinux policy does not allow named to write master zone files. If you want to have named update the master zone files you need to set the named_write_master_zones boolean. .EX setsebool -P named_write_master_zones 1 .EEman/man8/samba_selinux.8 +1
-1@@ -34,7 +34,7 @@ setsebool -P allow_smbd_anon_write=1 .SH BOOLEANS .br SELinux policy is customizable based on least access required. So by -default SElinux policy turns off SELinux sharing of home directories and +default SELinux policy turns off SELinux sharing of home directories and the use of Samba shares from a remote machine as a home directory. .TP If you are setting up this machine as a Samba server and wish to share the home directories, you need to set the samba_enable_home_dirs boolean.
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com