Skip to content

Various fixes to the ntp policy module

Christopher J. PeBenito selinux-refpolicy 1 version New

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest2 of 6 patches 0 repliesNew

2 of 6 patches are in this archive. The cover letter announces 6.

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
2/6Remove getattr permision from ntp_admin()+0 -01 reply
2/6Remove getattr permision from ntp_admin()+0 -00 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [refpolicy] [PATCH v1 0/6] Various fixes to the ntp policy module
Quoted 14 lines · Dominick Grift

The previous patch was bad.

Dominick Grift (6):
Introduce ntp_conf_t config file type and use that instead of
net_conf_t so that ntp_admin() does not need access to network configuration to be able to manage ntpd.
There is no need for ntp_admin() to be able to get attributes of the
ntpd process.
Allow ntp_admin() to manage ntp_drift_t content.
Allow ntp_admin() to list etc_t directories to be able to list ntp
configuration content.
Use "Role allowed access." for consistency
Use permissions sets for compatibility.

Quoted 5 lines
 ntp.fc |  4 ++--
 ntp.if | 11 ++++++-----
 ntp.te |  7 ++++++-
 3 files changed, 14 insertions(+), 8 deletions(-)

patches 1, 3-6 merged.

Signature · 3 lines
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com

Read the cover letter in its thread