Security Enhanced Linux
What's New
Frequently Asked Questions
Background
Documents
License
Download
Participating
Mail List
Archives
Remaining Work
Contributors
Related Work
Press Releases
Information Assurance Research
NIARL In-house Research Areas
Mathematical Sciences Program
Sabbaticals
Computer & Information Sciences Research
Technology Transfer
Advanced Computing
Advanced Mathematics
Communications & Networking
Information Processing
Microelectronics
Other Technologies
Technology Fact Sheets
Publications
Related Links
|
SELinux Mailing List
subject: More nsswitch changes. Date: Tue, 04 Dec 2007 12:27:38 -0500
-- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Christopher J. PeBenito <cpebenito_at_tresys.com> subject: Re: More nsswitch changes. Date: Thu, 06 Dec 2007 10:55:56 -0500
I dropped the alsa, apache, because I think the nis/nscd that is currently in those are potentially wrong. Back in the example policy, there was some liberal usage of nis an nscd, and I suspect these are just carryovers. The netlink_route_socket usage provides a little more evidence. The other ones are merged. -- Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Daniel J Walsh <dwalsh_at_redhat.com> subject: Re: More nsswitch changes. Date: Thu, 06 Dec 2007 13:10:13 -0500
Christopher J. PeBenito wrote: > On Tue, 2007-12-04 at 12:27 -0500, Daniel J Walsh wrote:>> 12 files changed, 18 insertions(+), 91 deletions(-) > > I dropped the alsa, apache, because I think the nis/nscd that is > currently in those are potentially wrong. Back in the example policy, > there was some liberal usage of nis an nscd, and I suspect these are > just carryovers. The netlink_route_socket usage provides a little more > evidence. The other ones are merged. > Ok, greping through the source of alsa-utils shows no getpw. So I will remove that policy and wait for the avc's.
-----BEGIN PGP SIGNATURE-----
iD8DBQFHWDsFrlYvE4MpobMRAvL1AKC3r122CuFPNuo/2hhL+eRhxPHFKQCdHjtF
Jr8N/HK7V+fyD1VoqfVOXCM=
-- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Christopher J. PeBenito <cpebenito_at_tresys.com> subject: Re: More nsswitch changes. Date: Thu, 06 Dec 2007 13:42:13 -0500
Sounds good. It'd be nice if we could get someone to verify the other nsswitch usage in the policy. Maybe we need some policy janitors... or interns :) -- Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.
|
|
Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009 |