2009-11-12 20:54:36

by Daniel Walsh

[permalink] [raw]
Subject: [refpolicy] apps_seunshare.patch

http://people.fedoraproject.org/~dwalsh/SELinux/F12/apps_seunshare.patch

Fixes for seunshare policy

seunshare needs to be killable by calling apps

Since it is called by firefox and freinds lots of leaks need to be dontaudited

seunshare needs setuid, dav_override and sys_admin to mount /home and /tmp

sends syslog messages


2009-12-01 15:32:45

by cpebenito

[permalink] [raw]
Subject: [refpolicy] apps_seunshare.patch

On Thu, 2009-11-12 at 15:54 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F12/apps_seunshare.patch
>
> Fixes for seunshare policy
>
> seunshare needs to be killable by calling apps
>
> Since it is called by firefox and freinds lots of leaks need to be
> dontaudited
>
> seunshare needs setuid, dav_override and sys_admin to mount /home
> and /tmp
>
> sends syslog messages
>
Merged.

--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150