All of lore.kernel.org
 help / color / mirror / Atom feed
* [refpolicy] apps_wm.patch
@ 2009-03-05 16:20 Daniel J Walsh
  0 siblings, 0 replies; 8+ messages in thread
From: Daniel J Walsh @ 2009-03-05 16:20 UTC (permalink / raw)
  To: refpolicy

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F11/apps_wm.patch

wm policy used in MLS machines.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkmv+74ACgkQrlYvE4MpobPHKACfSREvRjP4OB7buURjiSN9nEVw
Ve8AoI3jvpEDEdGxHJQT+7SFiyMTVk2f
=BSep
-----END PGP SIGNATURE-----

^ permalink raw reply	[flat|nested] 8+ messages in thread

* [refpolicy] apps_wm.patch
@ 2010-08-26 22:44 Daniel J Walsh
  0 siblings, 0 replies; 8+ messages in thread
From: Daniel J Walsh @ 2010-08-26 22:44 UTC (permalink / raw)
  To: refpolicy

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F14/apps_wm.patch

Allow window manager to make home files.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkx27mQACgkQrlYvE4MpobP71wCgkAhT72fkzmFnsQaPehYnBTcU
5sgAn0NViWvFQn+jZWFk8huCnk5LlnOh
=tDHA
-----END PGP SIGNATURE-----

^ permalink raw reply	[flat|nested] 8+ messages in thread

* [refpolicy] apps_wm.patch
  2010-06-02 20:16 Daniel J Walsh
@ 2010-06-25 13:01 ` Christopher J. PeBenito
  0 siblings, 0 replies; 8+ messages in thread
From: Christopher J. PeBenito @ 2010-06-25 13:01 UTC (permalink / raw)
  To: refpolicy

On Wed, 2010-06-02 at 16:16 -0400, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F14/apps_wm.patch
> 
> Window manager policy changes needed for MLS policy.

Merged.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com

^ permalink raw reply	[flat|nested] 8+ messages in thread

* [refpolicy] apps_wm.patch
@ 2010-06-02 20:16 Daniel J Walsh
  2010-06-25 13:01 ` Christopher J. PeBenito
  0 siblings, 1 reply; 8+ messages in thread
From: Daniel J Walsh @ 2010-06-02 20:16 UTC (permalink / raw)
  To: refpolicy

http://people.fedoraproject.org/~dwalsh/SELinux/F14/apps_wm.patch

Window manager policy changes needed for MLS policy.

^ permalink raw reply	[flat|nested] 8+ messages in thread

* [refpolicy] apps_wm.patch
  2009-07-14 14:29   ` Daniel J Walsh
@ 2009-07-27 19:12     ` Chris PeBenito
  0 siblings, 0 replies; 8+ messages in thread
From: Chris PeBenito @ 2009-07-27 19:12 UTC (permalink / raw)
  To: refpolicy

On Tue, 2009-07-14 at 10:29 -0400, Daniel J Walsh wrote:
> On 07/14/2009 09:44 AM, Christopher J. PeBenito wrote:
> > On Thu, 2009-05-21 at 09:59 -0400, Daniel J Walsh wrote:
> >> http://people.fedoraproject.org/~dwalsh/SELinux/F11/apps_wm.patch
> >>
> >> window manager policy developed by the MLS guys for handling Window
> >> Manager events in an MLS environment.
> > 
> > This looks like should be collapsed into wm_t+ubac.
> > 
> I am not sure you can because you need calls like
> 
> corecmd_bin_domtrans(guest_wm_t, guest_t)
> corecmd_shell_domtrans(guest_wm_t, guest_t)
> 
> guest_t -> wm_exec_t -> guest_wm_t -> bin_t -> guest_t
> 
> Similar to what we have with dbus.

Merged.

-- 
Chris PeBenito
<pebenito@gentoo.org>
Developer,
Hardened Gentoo Linux
 
Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
Key fingerprint = B0E6 877A 883F A57A 8E6A  CB00 BC8E E42D E6AF 9243

^ permalink raw reply	[flat|nested] 8+ messages in thread

* [refpolicy] apps_wm.patch
  2009-07-14 13:44 ` Christopher J. PeBenito
@ 2009-07-14 14:29   ` Daniel J Walsh
  2009-07-27 19:12     ` Chris PeBenito
  0 siblings, 1 reply; 8+ messages in thread
From: Daniel J Walsh @ 2009-07-14 14:29 UTC (permalink / raw)
  To: refpolicy

On 07/14/2009 09:44 AM, Christopher J. PeBenito wrote:
> On Thu, 2009-05-21 at 09:59 -0400, Daniel J Walsh wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F11/apps_wm.patch
>>
>> window manager policy developed by the MLS guys for handling Window
>> Manager events in an MLS environment.
> 
> This looks like should be collapsed into wm_t+ubac.
> 
I am not sure you can because you need calls like



corecmd_bin_domtrans(guest_wm_t, guest_t)
corecmd_shell_domtrans(guest_wm_t, guest_t)

guest_t -> wm_exec_t -> guest_wm_t -> bin_t -> guest_t

Similar to what we have with dbus.

^ permalink raw reply	[flat|nested] 8+ messages in thread

* [refpolicy] apps_wm.patch
  2009-05-21 13:59 Daniel J Walsh
@ 2009-07-14 13:44 ` Christopher J. PeBenito
  2009-07-14 14:29   ` Daniel J Walsh
  0 siblings, 1 reply; 8+ messages in thread
From: Christopher J. PeBenito @ 2009-07-14 13:44 UTC (permalink / raw)
  To: refpolicy

On Thu, 2009-05-21 at 09:59 -0400, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F11/apps_wm.patch
> 
> window manager policy developed by the MLS guys for handling Window
> Manager events in an MLS environment.

This looks like should be collapsed into wm_t+ubac.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

^ permalink raw reply	[flat|nested] 8+ messages in thread

* [refpolicy] apps_wm.patch
@ 2009-05-21 13:59 Daniel J Walsh
  2009-07-14 13:44 ` Christopher J. PeBenito
  0 siblings, 1 reply; 8+ messages in thread
From: Daniel J Walsh @ 2009-05-21 13:59 UTC (permalink / raw)
  To: refpolicy

http://people.fedoraproject.org/~dwalsh/SELinux/F11/apps_wm.patch

window manager policy developed by the MLS guys for handling Window 
Manager events in an MLS environment.

^ permalink raw reply	[flat|nested] 8+ messages in thread

end of thread, other threads:[~2010-08-26 22:44 UTC | newest]

Thread overview: 8+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2009-03-05 16:20 [refpolicy] apps_wm.patch Daniel J Walsh
2009-05-21 13:59 Daniel J Walsh
2009-07-14 13:44 ` Christopher J. PeBenito
2009-07-14 14:29   ` Daniel J Walsh
2009-07-27 19:12     ` Chris PeBenito
2010-06-02 20:16 Daniel J Walsh
2010-06-25 13:01 ` Christopher J. PeBenito
2010-08-26 22:44 Daniel J Walsh

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.