bcfg2-server contrib policy
PATCH 1/1 bcfg2-server contrib policy
A new policy for bcfg2-server from Fedora contrib repo.
(git://git.fedorahosted.org/selinux-policy.git)
Description:
bcfg2-server This daemon serves configurations to clients based on the data in its repository
Patch:
http://mgrepl.fedorapeople.org/SELinux/F18/contrib_bcfg2.patch
PATCH 1/1 bcfg2-server contrib policy
Quoted 2 lines · Miroslav Grepl
A new policy for bcfg2-server from Fedora contrib repo.
(git://git.fedorahosted.org/selinux-policy.git)
1. major far reaching differences between fedora's and refpolicy's auth_use_nsswitch() implementations
2. files_read_etc_files() is redundant. already allowed in auth_use_nsswitch()
3. files dont need a file transition from var_lib_t to bcfg2_var_lib_t; only dirs as per file context specification:
/var/lib/bcfg2(/.*)?gen_context(system_u:object_r:bcfg2_var_lib_t,s0)
4. cfg2_systemctl() relies on systemd policy which isnt upstreamed
5. nit: "## <summary>policy for bcfg2</summary>" is not a proper summary
5 a.
+## <summary>
+## Transition to bcfg2.
+## </summary>
is not a proper summary
Quoted 11 lines
Description:
bcfg2-server This daemon serves configurations to clients based on the data in its repositoryPatch:
http://mgrepl.fedorapeople.org/SELinux/F18/contrib_bcfg2.patch_______________________________________________
refpolicy mailing list
refpolicy at oss.tresys.com
http://oss.tresys.com/mailman/listinfo/refpolicy
PATCH 1/1 bcfg2-server contrib policy
In reply to Miroslav GreplQuoted 7 lines · Miroslav Grepl
A new policy for bcfg2-server from Fedora contrib repo.
(git://git.fedorahosted.org/selinux-policy.git)Description:
bcfg2-server This daemon serves configurations to clients based on the data in its repository
Quoted 7 lines
Patch:
http://mgrepl.fedorapeople.org/SELinux/F18/contrib_bcfg2.patch_______________________________________________
refpolicy mailing list
refpolicy at oss.tresys.com
http://oss.tresys.com/mailman/listinfo/refpolicy
Updated.
PATCH 1/1 bcfg2-server contrib policy
Quoted 4 lines · Miroslav Grepl
Quoted 3 lines · Miroslav Grepl
A new policy for bcfg2-server from Fedora contrib repo.
(git://git.fedorahosted.org/selinux-policy.git)
Quoted 8 lines
Quoted 7 lines
Description:
bcfg2-server This daemon serves configurations to clients based on the data in its repositoryPatch:
http://mgrepl.fedorapeople.org/SELinux/F18/contrib_bcfg2.patchUpdated.
Merged.
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com