2011-01-31 17:40:12

by Justin P. Mattock

[permalink] [raw]
Subject: [refpolicy] [PATCH 1/2]man/man8 Change SElinux to SELinux.

The below patch, changes the workd SElinux to SELinux to match the rest
in the policy and outside.

Signed-off-by: Justin P. Mattock <[email protected]>

---
man/man8/httpd_selinux.8 | 2 +-
man/man8/named_selinux.8 | 2 +-
man/man8/samba_selinux.8 | 2 +-
3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/man/man8/httpd_selinux.8 b/man/man8/httpd_selinux.8
index a939a74..16e8b13 100644
--- a/man/man8/httpd_selinux.8
+++ b/man/man8/httpd_selinux.8
@@ -57,7 +57,7 @@ setsebool -P allow_httpd_sys_script_anon_write=1
.EE

.SH BOOLEANS
-SELinux policy is customizable based on least access required. SElinux can be setup to prevent certain http scripts from working. httpd policy is extremely flexible and has several booleans that allow you to manipulate the policy and run httpd with the tightest access possible.
+SELinux policy is customizable based on least access required. SELinux can be setup to prevent certain http scripts from working. httpd policy is extremely flexible and has several booleans that allow you to manipulate the policy and run httpd with the tightest access possible.
.PP
httpd can be setup to allow cgi scripts to be executed, set httpd_enable_cgi to allow this

diff --git a/man/man8/named_selinux.8 b/man/man8/named_selinux.8
index 4dab2e2..fce0b48 100644
--- a/man/man8/named_selinux.8
+++ b/man/man8/named_selinux.8
@@ -15,7 +15,7 @@ Security-Enhanced Linux secures the named server via flexible mandatory access
control.
.SH BOOLEANS
SELinux policy is customizable based on least access required. So by
-default SElinux policy does not allow named to write master zone files. If you want to have named update the master zone files you need to set the named_write_master_zones boolean.
+default SELinux policy does not allow named to write master zone files. If you want to have named update the master zone files you need to set the named_write_master_zones boolean.
.EX
setsebool -P named_write_master_zones 1
.EE
diff --git a/man/man8/samba_selinux.8 b/man/man8/samba_selinux.8
index 14498e1..ca702c7 100644
--- a/man/man8/samba_selinux.8
+++ b/man/man8/samba_selinux.8
@@ -34,7 +34,7 @@ setsebool -P allow_smbd_anon_write=1
.SH BOOLEANS
.br
SELinux policy is customizable based on least access required. So by
-default SElinux policy turns off SELinux sharing of home directories and
+default SELinux policy turns off SELinux sharing of home directories and
the use of Samba shares from a remote machine as a home directory.
.TP
If you are setting up this machine as a Samba server and wish to share the home directories, you need to set the samba_enable_home_dirs boolean.
--
1.6.5.GIT


2011-01-31 17:40:13

by Justin P. Mattock

[permalink] [raw]
Subject: [refpolicy] [PATCH 2/2]policy/modules/system/lvm.te Typo change directores to directories, and also clean up a comment.

The below patch changes a typo "directores" to "directories", and also
fixes a comment to sound more proper.

Signed-off-by: Justin P. Mattock <[email protected]>

---
policy/modules/system/lvm.te | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/policy/modules/system/lvm.te b/policy/modules/system/lvm.te
index 86ef2da..74e38b4 100644
--- a/policy/modules/system/lvm.te
+++ b/policy/modules/system/lvm.te
@@ -274,9 +274,9 @@ storage_relabel_fixed_disk(lvm_t)
storage_dontaudit_read_removable_device(lvm_t)
# LVM creates block devices in /dev/mapper or /dev/<vg>
# depending on its version
-# LVM(2) needs to create directores (/dev/mapper, /dev/<vg>)
+# LVM(2) needs to create directories (/dev/mapper, /dev/<vg>)
# and links from /dev/<vg> to /dev/mapper/<vg>-<lv>
-# cjp: need create interface here for fixed disk create
+# cjp: needs to create an interface here for fixed disk create
storage_dev_filetrans_fixed_disk(lvm_t)
# Access raw devices and old /dev/lvm (c 109,0). Is this needed?
storage_manage_fixed_disk(lvm_t)
--
1.6.5.GIT

2011-02-01 14:12:45

by cpebenito

[permalink] [raw]
Subject: [refpolicy] [PATCH 1/2]man/man8 Change SElinux to SELinux.

On 01/31/11 12:40, Justin P. Mattock wrote:
> The below patch, changes the workd SElinux to SELinux to match the rest
> in the policy and outside.

These two are merged.

> Signed-off-by: Justin P. Mattock <[email protected]>
>
> ---
> man/man8/httpd_selinux.8 | 2 +-
> man/man8/named_selinux.8 | 2 +-
> man/man8/samba_selinux.8 | 2 +-
> 3 files changed, 3 insertions(+), 3 deletions(-)
>
> diff --git a/man/man8/httpd_selinux.8 b/man/man8/httpd_selinux.8
> index a939a74..16e8b13 100644
> --- a/man/man8/httpd_selinux.8
> +++ b/man/man8/httpd_selinux.8
> @@ -57,7 +57,7 @@ setsebool -P allow_httpd_sys_script_anon_write=1
> .EE
>
> .SH BOOLEANS
> -SELinux policy is customizable based on least access required. SElinux can be setup to prevent certain http scripts from working. httpd policy is extremely flexible and has several booleans that allow you to manipulate the policy and run httpd with the tightest access possible.
> +SELinux policy is customizable based on least access required. SELinux can be setup to prevent certain http scripts from working. httpd policy is extremely flexible and has several booleans that allow you to manipulate the policy and run httpd with the tightest access possible.
> .PP
> httpd can be setup to allow cgi scripts to be executed, set httpd_enable_cgi to allow this
>
> diff --git a/man/man8/named_selinux.8 b/man/man8/named_selinux.8
> index 4dab2e2..fce0b48 100644
> --- a/man/man8/named_selinux.8
> +++ b/man/man8/named_selinux.8
> @@ -15,7 +15,7 @@ Security-Enhanced Linux secures the named server via flexible mandatory access
> control.
> .SH BOOLEANS
> SELinux policy is customizable based on least access required. So by
> -default SElinux policy does not allow named to write master zone files. If you want to have named update the master zone files you need to set the named_write_master_zones boolean.
> +default SELinux policy does not allow named to write master zone files. If you want to have named update the master zone files you need to set the named_write_master_zones boolean.
> .EX
> setsebool -P named_write_master_zones 1
> .EE
> diff --git a/man/man8/samba_selinux.8 b/man/man8/samba_selinux.8
> index 14498e1..ca702c7 100644
> --- a/man/man8/samba_selinux.8
> +++ b/man/man8/samba_selinux.8
> @@ -34,7 +34,7 @@ setsebool -P allow_smbd_anon_write=1
> .SH BOOLEANS
> .br
> SELinux policy is customizable based on least access required. So by
> -default SElinux policy turns off SELinux sharing of home directories and
> +default SELinux policy turns off SELinux sharing of home directories and
> the use of Samba shares from a remote machine as a home directory.
> .TP
> If you are setting up this machine as a Samba server and wish to share the home directories, you need to set the samba_enable_home_dirs boolean.


--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com

2011-02-01 20:13:55

by Guido Trentalancia

[permalink] [raw]
Subject: [refpolicy] [PATCH 2/2]policy/modules/system/lvm.te Typo change directores to directories, and also clean up a comment.

Thanks for the two documentation patches Justin !

Regards,

Guido

On Mon, 31/01/2011 at 09.40 -0800, Justin P. Mattock wrote:
> The below patch changes a typo "directores" to "directories", and also
> fixes a comment to sound more proper.
>
> Signed-off-by: Justin P. Mattock <[email protected]>
>
> ---
> policy/modules/system/lvm.te | 4 ++--
> 1 files changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/policy/modules/system/lvm.te b/policy/modules/system/lvm.te
> index 86ef2da..74e38b4 100644
> --- a/policy/modules/system/lvm.te
> +++ b/policy/modules/system/lvm.te
> @@ -274,9 +274,9 @@ storage_relabel_fixed_disk(lvm_t)
> storage_dontaudit_read_removable_device(lvm_t)
> # LVM creates block devices in /dev/mapper or /dev/<vg>
> # depending on its version
> -# LVM(2) needs to create directores (/dev/mapper, /dev/<vg>)
> +# LVM(2) needs to create directories (/dev/mapper, /dev/<vg>)
> # and links from /dev/<vg> to /dev/mapper/<vg>-<lv>
> -# cjp: need create interface here for fixed disk create
> +# cjp: needs to create an interface here for fixed disk create
> storage_dev_filetrans_fixed_disk(lvm_t)
> # Access raw devices and old /dev/lvm (c 109,0). Is this needed?
> storage_manage_fixed_disk(lvm_t)

2011-02-02 01:28:57

by Justin P. Mattock

[permalink] [raw]
Subject: [refpolicy] [PATCH 2/2]policy/modules/system/lvm.te Typo change directores to directories, and also clean up a comment.


On Feb 1, 2011, at 12:13 PM, Guido Trentalancia wrote:

> Thanks for the two documentation patches Justin !
>
> Regards,
>
> Guido

sure thing dude!!! if I see anymore Ill send them on up..

>
> On Mon, 31/01/2011 at 09.40 -0800, Justin P. Mattock wrote:
>> The below patch changes a typo "directores" to "directories", and
>> also
>> fixes a comment to sound more proper.
>>
>> Signed-off-by: Justin P. Mattock <[email protected]>
>>
>> ---
>> policy/modules/system/lvm.te | 4 ++--
>> 1 files changed, 2 insertions(+), 2 deletions(-)
>>
>> diff --git a/policy/modules/system/lvm.te b/policy/modules/system/
>> lvm.te
>> index 86ef2da..74e38b4 100644
>> --- a/policy/modules/system/lvm.te
>> +++ b/policy/modules/system/lvm.te
>> @@ -274,9 +274,9 @@ storage_relabel_fixed_disk(lvm_t)
>> storage_dontaudit_read_removable_device(lvm_t)
>> # LVM creates block devices in /dev/mapper or /dev/<vg>
>> # depending on its version
>> -# LVM(2) needs to create directores (/dev/mapper, /dev/<vg>)
>> +# LVM(2) needs to create directories (/dev/mapper, /dev/<vg>)
>> # and links from /dev/<vg> to /dev/mapper/<vg>-<lv>
>> -# cjp: need create interface here for fixed disk create
>> +# cjp: needs to create an interface here for fixed disk create
>> storage_dev_filetrans_fixed_disk(lvm_t)
>> # Access raw devices and old /dev/lvm (c 109,0). Is this needed?
>> storage_manage_fixed_disk(lvm_t)
>
>