All of lore.kernel.org
 help / color / mirror / Atom feed
* [refpolicy] [PATCH] Label /etc/hosts.allow as net_conf_t
@ 2018-06-20  9:38 Laurent Bigonville
  2018-06-23 15:39 ` Chris PeBenito
  0 siblings, 1 reply; 2+ messages in thread
From: Laurent Bigonville @ 2018-06-20  9:38 UTC (permalink / raw)
  To: refpolicy

From: Laurent Bigonville <bigon@bigon.be>

/etc/hosts.deny is labeled as net_conf_t so it makes sense to label
hosts.allow the same way

Signed-off-by: Laurent Bigonville <bigon@bigon.be>
---
 policy/modules/system/sysnetwork.fc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/system/sysnetwork.fc b/policy/modules/system/sysnetwork.fc
index 91fb5160..cd528938 100644
--- a/policy/modules/system/sysnetwork.fc
+++ b/policy/modules/system/sysnetwork.fc
@@ -16,6 +16,7 @@ ifdef(`distro_debian',`
 /etc/dhcp/dhcpd\.conf	--	gen_context(system_u:object_r:dhcp_etc_t,s0)
 /etc/ethers		--	gen_context(system_u:object_r:net_conf_t,s0)
 /etc/hosts		--	gen_context(system_u:object_r:net_conf_t,s0)
+/etc/hosts\.allow.*	--	gen_context(system_u:object_r:net_conf_t,s0)
 /etc/hosts\.deny.*	--	gen_context(system_u:object_r:net_conf_t,s0)
 /etc/denyhosts.*	--	gen_context(system_u:object_r:net_conf_t,s0)
 /etc/resolv\.conf.*	--	gen_context(system_u:object_r:net_conf_t,s0)
-- 
2.18.0.rc2

^ permalink raw reply related	[flat|nested] 2+ messages in thread

* [refpolicy] [PATCH] Label /etc/hosts.allow as net_conf_t
  2018-06-20  9:38 [refpolicy] [PATCH] Label /etc/hosts.allow as net_conf_t Laurent Bigonville
@ 2018-06-23 15:39 ` Chris PeBenito
  0 siblings, 0 replies; 2+ messages in thread
From: Chris PeBenito @ 2018-06-23 15:39 UTC (permalink / raw)
  To: refpolicy

On 06/20/2018 05:38 AM, Laurent Bigonville via refpolicy wrote:
> From: Laurent Bigonville <bigon@bigon.be>
> 
> /etc/hosts.deny is labeled as net_conf_t so it makes sense to label
> hosts.allow the same way
> 
> Signed-off-by: Laurent Bigonville <bigon@bigon.be>
> ---
>   policy/modules/system/sysnetwork.fc | 1 +
>   1 file changed, 1 insertion(+)
> 
> diff --git a/policy/modules/system/sysnetwork.fc b/policy/modules/system/sysnetwork.fc
> index 91fb5160..cd528938 100644
> --- a/policy/modules/system/sysnetwork.fc
> +++ b/policy/modules/system/sysnetwork.fc
> @@ -16,6 +16,7 @@ ifdef(`distro_debian',`
>   /etc/dhcp/dhcpd\.conf	--	gen_context(system_u:object_r:dhcp_etc_t,s0)
>   /etc/ethers		--	gen_context(system_u:object_r:net_conf_t,s0)
>   /etc/hosts		--	gen_context(system_u:object_r:net_conf_t,s0)
> +/etc/hosts\.allow.*	--	gen_context(system_u:object_r:net_conf_t,s0)
>   /etc/hosts\.deny.*	--	gen_context(system_u:object_r:net_conf_t,s0)
>   /etc/denyhosts.*	--	gen_context(system_u:object_r:net_conf_t,s0)
>   /etc/resolv\.conf.*	--	gen_context(system_u:object_r:net_conf_t,s0)

Merged.

-- 
Chris PeBenito

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2018-06-23 15:39 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2018-06-20  9:38 [refpolicy] [PATCH] Label /etc/hosts.allow as net_conf_t Laurent Bigonville
2018-06-23 15:39 ` Chris PeBenito

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.