2011-12-02 14:22:24

by Daniel Walsh

[permalink] [raw]
Subject: [refpolicy] Red Hat Subscription Manager policy for contrib.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Red Hat Subscription Manager
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk7Y3yAACgkQrlYvE4MpobNxoQCfZILtmchEH92Tq2wiiFWcgQPF
1U0An16RgAw7G9QgdmJEnnF2FMVJ81bK
=lr79
-----END PGP SIGNATURE-----
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: rhsmcertd.patch
Url: http://oss.tresys.com/pipermail/refpolicy/attachments/20111202/06f4688f/attachment-0001.pl


2012-01-05 18:47:14

by sven.vermeulen

[permalink] [raw]
Subject: [refpolicy] Red Hat Subscription Manager policy for contrib.

On Fri, Dec 02, 2011 at 09:22:24AM -0500, Daniel J Walsh wrote:
> Red Hat Subscription Manager
[...]

Looks good, one question though (but of interest to compare with my local
policies here):

> +optional_policy(`
> + sysnet_dns_name_resolve(rhsmcertd_t)
> +')

Is sysnetwork not part of base in RHEL?

Wkr,
Sven Vermeulen

2012-01-05 20:07:47

by Daniel Walsh

[permalink] [raw]
Subject: [refpolicy] Red Hat Subscription Manager policy for contrib.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/05/2012 01:47 PM, Sven Vermeulen wrote:
> On Fri, Dec 02, 2011 at 09:22:24AM -0500, Daniel J Walsh wrote:
>> Red Hat Subscription Manager
> [...]
>
> Looks good, one question though (but of interest to compare with my
> local policies here):
>
>> +optional_policy(` + sysnet_dns_name_resolve(rhsmcertd_t) +')
>
> Is sysnetwork not part of base in RHEL?
>
> Wkr, Sven Vermeulen
> _______________________________________________ refpolicy mailing
> list refpolicy at oss.tresys.com
> http://oss.tresys.com/mailman/listinfo/refpolicy
Yes this should probably not be optional.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk8GAxMACgkQrlYvE4MpobPaAwCeIuHHpG6rQl9Kg9EqHz18DyuH
W0gAnRnfl65mbXI8RZWkAyZsg9gRdzU8
=sa0W
-----END PGP SIGNATURE-----