From: dwalsh@redhat.com (Daniel J Walsh)
Date: Wed, 24 Sep 2008 16:19:24 -0400
Subject: [refpolicy] services_nis.patch
Message-ID: <48DAA0CC.7050202@redhat.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F10/services_nis.patch

Add initrc script support

allow admin to start/stop service

Admin needs admin_pattern on all file types


Fix path for /usr/lib64/yp/ypxfr

Does need net_bind_service

binds to only rpc ports

add interface for nis_authenticate uses by sasl

ypbind uses dbus

chats with networkmanager

yppasswd needs dac_override

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkjaoMwACgkQrlYvE4MpobMTgwCg5qT1F4354T9ZIxlmsGmEary4
Ym0AoNGuYS/L6bx1ABQD9aPHz6AKof4O
=iPhx
-----END PGP SIGNATURE-----