From: russell@coker.com.au (Russell Coker)
To: refpolicy@oss.tresys.com
Subject: [refpolicy] [PATCH] misc fc changes
Date: Tue, 4 Apr 2017 17:49:35 +1000 [thread overview]
Message-ID: <201704041749.35398.russell@coker.com.au> (raw)
In-Reply-To: <20170404073248.GB10685@t450.enp8s0.d30>
On Tue, 4 Apr 2017 05:32:48 PM Dominick Grift via refpolicy wrote:
> > +/etc/network/if-pre-up.d/.*
> > -- gen_context(system_u:object_r:initrc_exec_t,s0)
> > +/etc/network/if-up.d/.*
> > -- gen_context(system_u:object_r:initrc_exec_t,s0)
> > +/etc/network/if-down.d/.*
> > -- gen_context(system_u:object_r:initrc_exec_t,s0)
> > +/etc/network/if-post-down.d/.* --
> > gen_context(system_u:object_r:initrc_exec_t,s0)
>
> I would probably use bin_t here if possible but regardless: you might want
> to escape the periods there to avoid possible regex issues later on
If bin_t was used then we wouldn't get the domain transitions needed to start
daemons in the correct context.
If at some future time we have something like a /etc/network/if-up-d directory
then we probably want the same context for the files it contains.
--
My Main Blog http://etbe.coker.com.au/
My Documents Blog http://doc.coker.com.au/
next prev parent reply other threads:[~2017-04-04 7:49 UTC|newest]
Thread overview: 21+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-04-02 8:58 [refpolicy] [PATCH] misc fc changes Russell Coker
2017-04-03 23:11 ` Chris PeBenito
2017-04-04 1:21 ` Russell Coker
2017-04-04 22:50 ` Chris PeBenito
2017-04-05 4:12 ` Russell Coker
2017-04-04 7:23 ` Dominick Grift
2017-04-04 7:47 ` Russell Coker
2017-04-04 22:54 ` Chris PeBenito
2017-04-05 4:16 ` Russell Coker
2017-04-04 7:32 ` Dominick Grift
2017-04-04 7:49 ` Russell Coker [this message]
2017-04-04 7:53 ` Dominick Grift
2017-04-04 8:02 ` Russell Coker
2017-04-04 8:02 ` Dominick Grift
2017-04-04 8:05 ` Russell Coker
2017-04-04 22:56 ` Chris PeBenito
2017-04-05 4:14 ` Russell Coker
2017-04-04 7:44 ` Dominick Grift
2017-04-04 8:00 ` Russell Coker
2017-04-04 8:08 ` Dominick Grift
2017-04-04 8:13 ` Russell Coker
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=201704041749.35398.russell@coker.com.au \
--to=russell@coker.com.au \
--cc=refpolicy@oss.tresys.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.