* rpm-script needs to be able to look at running processes on the system
@ 2007-02-26 17:05 Daniel J Walsh
2007-02-28 14:16 ` Christopher J. PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Daniel J Walsh @ 2007-02-26 17:05 UTC (permalink / raw)
To: Christopher J. PeBenito, SE Linux
mcs is causing avc messages if usr logs in to root as s0, and wants to
do a yum update, rpm_script is not allowed to look at running processes
unless these privs are added.
--- nsaserefpolicy/policy/modules/admin/rpm.te 2007-02-19
11:32:54.000000000 -0500
+++ serefpolicy-2.5.5/policy/modules/admin/rpm.te 2007-02-26
11:02:34.000000000 -0500
@@ -256,6 +258,9 @@
kernel_read_kernel_sysctls(rpm_script_t)
kernel_read_system_state(rpm_script_t)
+mcs_killall(rpm_script_t)
+mcs_ptrace_all(rpm_script_t)
+
dev_list_sysfs(rpm_script_t)
# ideally we would not need this
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: rpm-script needs to be able to look at running processes on the system
2007-02-26 17:05 rpm-script needs to be able to look at running processes on the system Daniel J Walsh
@ 2007-02-28 14:16 ` Christopher J. PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2007-02-28 14:16 UTC (permalink / raw)
To: Daniel J Walsh; +Cc: SE Linux
On Mon, 2007-02-26 at 12:05 -0500, Daniel J Walsh wrote:
> mcs is causing avc messages if usr logs in to root as s0, and wants to
> do a yum update, rpm_script is not allowed to look at running processes
> unless these privs are added.
Already in there, a few lines down.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2007-02-28 14:14 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2007-02-26 17:05 rpm-script needs to be able to look at running processes on the system Daniel J Walsh
2007-02-28 14:16 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.