hostname daemon init hostname from dhcpcd, try 2
PATCH 1/1 hostname daemon init hostname from dhcpcd, try 2
From: Chris Richards <[email protected]>
Allow the hostname daemon to configure the system hostname according to information obtained from dhcpcd DHCP Client daemon.
--- policy/modules/system/hostname.te | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-)
policy/modules/system/hostname.te +2 -0
@@ -49,6 +49,8 @@ init_use_script_ptys(hostname_t) logging_send_syslog_msg(hostname_t) +sysnet_rw_dhcpc_stream_sockets(hostname_t) + miscfiles_read_localization(hostname_t) sysnet_read_config(hostname_t)
Signature · 1 line
1.7.3.2
PATCH 1/1 hostname daemon init hostname from dhcpcd, try 2
Quoted 4 lines · gizmo at giz-works.com
From: Chris Richards <[email protected]>
Allow the hostname daemon to configure the system hostname according to information obtained from dhcpcd DHCP Client daemon.
Are you sure these aren't from a leaked fd?
Quoted 18 lines
Signed-off-by Chris Richards <[email protected]>--- policy/modules/system/hostname.te | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-)policy/modules/system/hostname.te +2
-0@@ -49,6 +49,8 @@ init_use_script_ptys(hostname_t) logging_send_syslog_msg(hostname_t) +sysnet_rw_dhcpc_stream_sockets(hostname_t) + miscfiles_read_localization(hostname_t) sysnet_read_config(hostname_t)
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com
PATCH 1/1 hostname daemon init hostname from dhcpcd, try 2
Quoted 7 lines · Christopher J. PeBenito
Quoted 4 lines · gizmo at giz-works.com
From: Chris Richards<[email protected]>
Allow the hostname daemon to configure the system hostname according to information obtained from dhcpcd DHCP Client daemon.
Are you sure these aren't from a leaked fd?
Not 100%, no. How would I tell?
Quoted 19 lines
Quoted 18 lines
Signed-off-by Chris Richards<[email protected]>--- policy/modules/system/hostname.te | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-)policy/modules/system/hostname.te +2
-0@@ -49,6 +49,8 @@ init_use_script_ptys(hostname_t) logging_send_syslog_msg(hostname_t) +sysnet_rw_dhcpc_stream_sockets(hostname_t) + miscfiles_read_localization(hostname_t) sysnet_read_config(hostname_t)
PATCH 1/1 hostname daemon init hostname from dhcpcd, try 2
Quoted 9 lines · Chris Richards
Quoted 7 lines · Christopher J. PeBenito
Quoted 4 lines · gizmo at giz-works.com
From: Chris Richards<[email protected]>
Allow the hostname daemon to configure the system hostname according to information obtained from dhcpcd DHCP Client daemon.
Are you sure these aren't from a leaked fd?
Not 100%, no. How would I tell?
Did you try dontauditing it? If its leaked it would work without the access.
Quoted 24 lines
Quoted 11 lines
Quoted 11 lines
Signed-off-by Chris Richards<[email protected]>--- policy/modules/system/hostname.te | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-)policy/modules/system/hostname.te +0
-0@@ -49,6 +49,8 @@ init_use_script_ptys(hostname_t)Quoted 8 lines
policy/modules/system/hostname.te init_use_script_ptys(hostname_t) · line 56
Quoted 7 lines
policy/modules/system/hostname.te +2
-0logging_send_syslog_msg(hostname_t) +sysnet_rw_dhcpc_stream_sockets(hostname_t) + miscfiles_read_localization(hostname_t) sysnet_read_config(hostname_t)_______________________________________________
refpolicy mailing list
refpolicy at oss.tresys.com
http://oss.tresys.com/mailman/listinfo/refpolicy
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com
PATCH 1/1 hostname daemon init hostname from dhcpcd, try 2
Quoted 5 lines · Christopher J. PeBenito
Quoted 4 lines · Chris Richards
Quoted 3 lines · Christopher J. PeBenito
Quoted 2 lines · gizmo at giz-works.com
From: Chris Richards<[email protected]>
Quoted 7 lines
Quoted 5 lines
Quoted 4 lines
Quoted 2 lines
Allow the hostname daemon to configure the system hostname according to information obtained from dhcpcd DHCP Client daemon.
Are you sure these aren't from a leaked fd?
Not 100%, no. How would I tell?
Did you try dontauditing it? If its leaked it would work without the access.
I am unable to reproduce even the AVC that caused this. Since this was a corner-case anyway, let's just table this patch for the time being. It's not going to affect very many people, and if I can reproduce it, I'll see if I can investigate it a bit more thoroughly.
Quoted 23 lines
Quoted 22 lines
Quoted 11 lines
Quoted 11 lines
Signed-off-by Chris Richards<[email protected]>--- policy/modules/system/hostname.te | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-)policy/modules/system/hostname.te +0
-0@@ -49,6 +49,8 @@ init_use_script_ptys(hostname_t)Quoted 7 lines
policy/modules/system/hostname.te init_use_script_ptys(hostname_t) · line 56
Quoted 7 lines
policy/modules/system/hostname.te +2
-0logging_send_syslog_msg(hostname_t) +sysnet_rw_dhcpc_stream_sockets(hostname_t) + miscfiles_read_localization(hostname_t) sysnet_read_config(hostname_t)_______________________________________________
refpolicy mailing list
refpolicy at oss.tresys.com
http://oss.tresys.com/mailman/listinfo/refpolicy