Re: [patch 17/35] brctl policy update

On Thu, 2008-08-07 at 11:11 -0400, Daniel J Walsh wrote:
> Christopher J. PeBenito wrote:
> > On Mon, 2008-08-04 at 14:35 +0200, david@hardeman.nu wrote:
> >> plain text document attachment (policy_modules_admin_brctl.patch)
> >> One minor change
> >
> > I need justification for this change.
> >
> >> Index: refpolicy/policy/modules/admin/brctl.te
> >> ===================================================================
> >> --- refpolicy.orig/policy/modules/admin/brctl.te 2008-08-03 16:47:00.000000000 +0200
> >> +++ refpolicy/policy/modules/admin/brctl.te 2008-08-03 18:01:42.000000000 +0200
> >> @@ -33,6 +33,8 @@
> >>
> >> files_read_etc_files(brctl_t)
> >>
> >> +term_use_console(brctl_t)
> >> +
> >> libs_use_ld_so(brctl_t)
> >> libs_use_shared_libs(brctl_t)
> >>
> >>
> I believe this comes from libvirt or qemu interacting with the console.

Sounds like this should be dontaudited instead.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.