Numerous dontaudits
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest12 of 13 patches 0 repliesNew
12 of 13 patches are in this archive. The cover letter announces 13.
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/13 | Adding dontaudit interfaces for files modulepolicy/ | +36 | 1 reply | |
| 2/13 | Adding dontaudit on mozillamozilla.te | +1 | 1 reply | |
| 3/13 | Adding dontaudit on mtamta.if | +2 | 1 reply | |
| 4/13 | Adding dontaudits for portage domainsportage.te | +6 | 1 reply | |
| 6/13 | Adding dontaudit interfaces in sysnetpolicy/ | +19 | 1 reply | |
| 7/13 | Adding dontaudits for xserverpolicy/ | +2 | 1 reply | |
| 8/13 | Do not audit usage of a leaked file descriptordbus.if | +2 | 1 reply | |
| 9/13 | Do not audit rw on dhcp client unix_stream_socketspolicy/ | +1 | 1 reply | |
| 10/13 | Adding dontaudits for mountpolicy/ | +3 | 1 reply | |
| 11/13 | Adding dontaudits for selinuxutilpolicy/ | +2 | 1 reply | |
| 12/13 | Adding dontaudit for sudopolicy/ | +1 | 1 reply | |
| 13/13 | Adding dontaudits for raidraid.te | +2 | 1 reply |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [refpolicy] [PATCH 0/13] Numerous dontaudits
This set includes quite a few dontaudit updates on the policy that we have running in Gentoo since the 20110726 policies and without feedback from users that they are incorrect or that I'm missing something.
Now handling dontaudits isn't easy, it's often much easier to find out why you need to allow something (as the application otherwise breaks) whereas finding denials that do not seem to have any influence on the system is a lot harder to pin down.
But still, I guess it's okay to bring out these dontaudits in refpolicy; either others can find flaws or confirm that they too dontaudit these settings.