Skip to content

Some simple core policy updates

Christopher J. PeBenito selinux-refpolicy 1 version New

Get series with b4
b4 am [email protected]

Versions newest first

  1. v2 Latest0 of 8 patches 0 repliesNew

Patches in v2 No applies recorded yet

None of the 8 patches the cover letter announces are in this archive.

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v2 yet.

Read the v2 thread

Cover letter [refpolicy] [PATCH v2 0/8] Some simple core policy updates
Quoted 14 lines · Sven Vermeulen

This is a small set of policy updates that have been in the Gentoo policy for a while and are ready for upstreaming.

Added the auth_pid_filetrans_pam_var_run as Nicolas Iooss correctly found; shame that I missed it, I checked it against the wrong repository :(

Sven Vermeulen (8):
Run grub(2)-mkconfig in bootloader domain Add auth_pid_filetrans_pam_var_run
New sudo manages timestamp directory in /var/run/sudo xfce4-notifyd is an executable
Mark f2fs as a SELinux capable file system Add in LightDM contexts
Add gfisk and efibootmgr as fsadm_exec_t
Add /var/lib/racoon as runtime directory for ipsec

Quoted 9 lines
 policy/modules/admin/bootloader.fc    |  1 +
 policy/modules/admin/sudo.if          |  3 ++-
 policy/modules/kernel/corecommands.fc |  1 +
 policy/modules/kernel/filesystem.te   |  1 +
 policy/modules/services/xserver.fc    |  7 +++++++
 policy/modules/system/authlogin.if    | 31 +++++++++++++++++++++++++++++++
 policy/modules/system/fstools.fc      |  2 ++
 policy/modules/system/ipsec.fc        |  2 ++
 8 files changed, 47 insertions(+), 1 deletion(-)

This set is merged.

Signature · 3 lines
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com

Read the cover letter in its thread