2009-11-12 22:10:50

by Daniel Walsh

Subject: [refpolicy] system_iscsi.patch

http://people.fedoraproject.org/~dwalsh/SELinux/F12/system_iscsi.patch

ISCSI calls getpw

reads localization

does a ps

used debugfs

2009-11-24 16:08:29

by cpebenito

Subject: [refpolicy] system_iscsi.patch

On Thu, 2009-11-12 at 17:10 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F12/system_iscsi.patch
>
> ISCSI calls getpw
>
> reads localization
>
> does a ps

Does this really need to be allowed?

> used debugfs


Otherwise merged.


--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

2009-11-24 20:10:35

by Daniel Walsh

Subject: [refpolicy] system_iscsi.patch

On 11/24/2009 11:08 AM, Christopher J. PeBenito wrote:
> On Thu, 2009-11-12 at 17:10 -0500, Daniel J Walsh wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F12/system_iscsi.patch
>>
>> ISCSI calls getpw
>>
>> reads localization
>>
>> does a ps
>
> Does this really need to be allowed?
>
>> used debugfs
>
>
> Otherwise merged.
>
>
Probably can be changed to a dontaudit.