: patch set to update the git reference policy
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest0 of 19 patches 0 repliesNew
Patches in v1 No applies recorded yet
None of the 19 patches the cover letter announces are in this archive.
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [refpolicy] [PATCH/RFC 0/19]: patch set to update the git reference policy
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Quoted 10 lines · Guido Trentalancia
Hello Dominick !
Quoted 7 lines · Dominick Grift
Quoted 5 lines · Guido Trentalancia
Hello again !
I am resubmitting the changes that I proposed a few days ago for the latest reference policy. There are a few additions and now the patch has been split into a set of 19 logical patches.
Quoted 8 lines
Quoted 2 lines
I did a quick review of your policy and commented inline. I think most of it is probably not acceptable at this point unfortunately.
Yes, I have started to look at your comments. Of course they are all good points that you have made and that need to be changed.
But after those issues will have been fixed, what else would prevent the patch from being committed ?
For example the way you deal with dbus chat, is not the way refpolicy usually deas with it.
Where you have dbus_*_send interfaces that only go one way, refpolicy uses dbus_*_chat interfaces that are bi-directional.
This is because if some process send a message and is allowed that, then one can be sure that the receiving party will want to reply to that message and that you will want to allow that reply (why else would you have allowed the initial party to send a message in the first place?
Quoted 4 lines
Quoted 4 lines
It may be beneficial to get even more familiar with reference policy and the concepts/security goals it uses.
Quoted 12 lines
Quoted 4 lines
You may also find my latest screencast called: introduction to policy writing, inspiring and hopefully informative:
http://selinux-mac.blogspot.com/2011/01/yet-another-step-by-step-introduction.html
I will have a look at it. Thanks again !
Quoted 3 lines
Quoted 3 lines
Regards,
Guido Trentalancia
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAk09ofMACgkQMlxVo39jgT9rUwCeMlrUdoibLRXZDSxj2x+2ro3f BQcAoM1XAUqXzgT8gDhkPJ7hDGhK2wZq
=rHvp
-----END PGP SIGNATURE-----