Skip to contentSkip to conversation

refpolicy: system_hostname changes

PATCH In review Daniel J Walsh 2 participants 2 messages Aug 2, 2007 – Sep 6, 2007 1 message not in the archive SELinux security module

lore
Share & tools
lore

A message that is not in the archive (sent off-list or not yet received): 200708021806.l72I6HNw022445@redsox

#1 lore raw

PATCH 1/1 refpolicy: system_hostname changes

Allow hostname to be redirected to xen log as well dontaudit interaction with uncofined pipes. system-config-network causes this

policy/modules/system/hostname.te +0 -0
@@ -60,3 +64,11 @@

xen_append_log(hostname_t)
xen_dontaudit_use_fds(hostname_t)
')
+
+optional_policy(`
+ xen_append_log(hostname_t)
+')
+
+optional_policy(`
+ unconfined_dontaudit_rw_pipes(hostname_t)

+')

--
This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to [email protected] with the words "unsubscribe selinux" without quotes as the message.

#2 lore raw
Quoted 2 lines · Daniel J Walsh

Allow hostname to be redirected to xen log as well

Already is in trunk.

Quoted 23 lines

dontaudit interaction with uncofined pipes. system-config-network causes this
--- nsaserefpolicy/policy/modules/system/hostname.te 2007-05-29
14:10:58.000000000 -0400
+++ serefpolicy-3.0.4/policy/modules/system/hostname.te 2007-07-25 12:27:26.000000000 -0400

(quoted diff) +8 -0
@@ -60,3 +64,11 @@
        xen_append_log(hostname_t)
        xen_dontaudit_use_fds(hostname_t)
 ')
+
+optional_policy(`
+       xen_append_log(hostname_t)
+')
+
+optional_policy(`
+       unconfined_dontaudit_rw_pipes(hostname_t)
 
+')
Signature · 10 lines
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to [email protected] with
the words "unsubscribe selinux" without quotes as the message.