Re: ***SPAM*** Re: Latest policy

James Carter wrote:

>Merged.
>
>I did notice that some of the changes to use read_sysctl() replaced
>statements like:
>allow foo_t sysctl_kernel_t:file r_file_perms;
>allow foo_t sysctl_kernel_t:dir r_dir_perms;
>instead of ones like:
>allow foo_t sysctl_kernel_t:dir search;
>allow foo_t sysctl_kernel_t:file read;
>This was the case for the following: fsadm.te, backup.te, clamav.te,
>gatekeeper.te, lvm.te, named.te, and clamav_macros.te.
>
>I didn't notice any problems though, so maybe they didn't need those
>permissions.
>
>
>

Yes I have not heard any complaints about this yet.

>Do we need to add this?
>cy-1.21.15/file_contexts/program/nrpe.fc
>--- nsapolicy/file_contexts/program/nrpe.fc 2005-02-24 14:51:09.000000000 -0500
>+++ policy-1.21.15/file_contexts/program/nrpe.fc 2005-03-07 09:36:55.000000000 -0500
>@@ -1,3 +1,5 @@
> # nrpe
> /usr/bin/nrpe -- system_u:object_r:nrpe_exec_t
> /etc/nagios/nrpe\.cfg -- system_u:object_r:nrpe_etc_t
>+/usr/lib(64)?/netsaint/plugins(/.*)? -- system_u:object_r:bin_t
>+/usr/lib(64)?/nagios/plugins(/.*)? -- system_u:object_r:bin_t
>
>
>

This is probably me missing a removal, since I have done nothing with nrpe. So eliminate this.

>These same statements are also in nagios.fc
>
>
>On Wed, 2005-03-09 at 00:27 -0500, Daniel J Walsh wrote:
>
>
>>Lots of policy cleanup via Ivan's Patches
>> Use read_sysctl
>> Cleanup of homedir macros
>>
>>Fixes to allow amanda to read file system
>>
>>Change apache stream sockets to use create_stream_socket_perms
>>
>>Eliminate cyrus_r
>>
>>Cleanup dhcpc.te so it can be used in targeted policy
>>
>>Add ftpd_anon_rw_t so that upload can be made to work with anonymous ftp
>>sites.
>>
>>Additional rules to allow postfix to work correctly in targeted policy
>>
>>Allow snmpd to communicate with its own fifo_file
>>
>>
>>
>
>
>
>

-- 



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.