selinux-refpolicy.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* what's up with mac_admin
@ 2019-03-10 22:31 Russell Coker
  2019-03-11  6:53 ` Dominick Grift
  0 siblings, 1 reply; 3+ messages in thread
From: Russell Coker @ 2019-03-10 22:31 UTC (permalink / raw)
  To: selinux-refpolicy

type=AVC msg=audit(1552226284.038:2422): avc:  denied  { mac_admin } for  
pid=8289 comm="rsync" capability=33  
scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 
tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 
permissive=0

The above is from running rsync with the -X option.

$ grep -R mac_admin .
./policy/flask/access_vectors:  mac_admin       # unused by SELinux
./policy/modules/apps/livecd.te:dontaudit livecd_t self:capability2 mac_admin;

Grepping the git policy shows that there's a comment saying it's unused as 
well as a dontaudit rule indicating that it has been used for some time.

-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/




^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2019-03-12  0:50 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-03-10 22:31 what's up with mac_admin Russell Coker
2019-03-11  6:53 ` Dominick Grift
2019-03-12  0:50   ` Chris PeBenito

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).