Research Menu

.
Skip Search Box

SELinux Mailing List

[patch 14/35] remotelogin policy update

From: david_at_hardeman.nu
Date: Mon, 04 Aug 2008 14:35:10 +0200


Additional user homedir permissions
Index: refpolicy/policy/modules/services/remotelogin.te


  • refpolicy.orig/policy/modules/services/remotelogin.te 2008-08-03 16:47:00.000000000 +0200
    +++ refpolicy/policy/modules/services/remotelogin.te 2008-08-03 18:01:36.000000000 +0200
    @@ -85,6 +85,7 @@

 miscfiles_read_localization(remote_login_t)  

+userdom_read_all_users_home_dirs_symlinks(remote_login_t)
 userdom_use_unpriv_users_fds(remote_login_t)  userdom_search_all_users_home_content(remote_login_t)  # Only permit unprivileged user domains to be entered via rlogin,

-- 
David Härdeman

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
Received on Mon 4 Aug 2008 - 08:51:20 EDT
 

Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009

 
bottom

National Security Agency / Central Security Service