2011-03-03 10:55:36

by mgrepl

[permalink] [raw]
Subject: [refpolicy] [patch 1/1] raid: support for iprinit, iprdump and iprupdate services

http://mgrepl.fedorapeople.org/F15/system_raid.patch

* iprinit, iprdump and iprupdate did not work in MLS so we now
treat these services with raid policy


2011-03-21 15:46:20

by cpebenito

[permalink] [raw]
Subject: [refpolicy] [patch 1/1] raid: support for iprinit, iprdump and iprupdate services

On 03/03/11 05:55, Miroslav Grepl wrote:
> http://mgrepl.fedorapeople.org/F15/system_raid.patch
>
> * iprinit, iprdump and iprupdate did not work in MLS so we now treat
> these services with raid policy

These tools appear to be for a hardware RAID solution, so mdadm_t would
not be an appropriate domain for them.

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com

2011-03-22 12:27:23

by Daniel Walsh

[permalink] [raw]
Subject: [refpolicy] [patch 1/1] raid: support for iprinit, iprdump and iprupdate services

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 03/21/2011 11:46 AM, Christopher J. PeBenito wrote:
> On 03/03/11 05:55, Miroslav Grepl wrote:
>> http://mgrepl.fedorapeople.org/F15/system_raid.patch
>>
>> * iprinit, iprdump and iprupdate did not work in MLS so we now treat
>> these services with raid policy
>
> These tools appear to be for a hardware RAID solution, so mdadm_t would
> not be an appropriate domain for them.
>
What label do you think they should have?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk2IlasACgkQrlYvE4MpobPhrQCcDRv20RG4b7pHXGsIdnOsM3Nl
4gUAn1c0gcy4abibmRJw43gDBD55FOuK
=qaxd
-----END PGP SIGNATURE-----

2011-03-23 13:36:45

by cpebenito

[permalink] [raw]
Subject: [refpolicy] [patch 1/1] raid: support for iprinit, iprdump and iprupdate services

On 03/22/11 08:27, Daniel J Walsh wrote:
> On 03/21/2011 11:46 AM, Christopher J. PeBenito wrote:
>> On 03/03/11 05:55, Miroslav Grepl wrote:
>>> http://mgrepl.fedorapeople.org/F15/system_raid.patch
>>>
>>> * iprinit, iprdump and iprupdate did not work in MLS so we now treat
>>> these services with raid policy
>
>> These tools appear to be for a hardware RAID solution, so mdadm_t would
>> not be an appropriate domain for them.
>
> What label do you think they should have?

Probably a new one.

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com