From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Mon, 06 Oct 2008 13:31:12 -0400 Subject: [refpolicy] admin_vpn.patch In-Reply-To: <48DBDCDE.4090806@redhat.com> References: <48DBDCDE.4090806@redhat.com> Message-ID: <1223314272.2165.22.camel@gorn> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On Thu, 2008-09-25 at 14:47 -0400, Daniel J Walsh wrote: > http://people.fedoraproject.org/~dwalsh/SELinux/F10/admin_vpn.patch > > vpn needs to sysnet_run_ifconfig rather then just domtrans to is, so > other roles can run it. > > needs net_admin capability, rewrite routing table > > Needs full rw_fifo_file_perms. Merged. -- Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150