From: dwalsh@redhat.com (Daniel J Walsh)
Date: Tue, 14 Oct 2008 15:46:45 -0400
Subject: [refpolicy] services_rshd.patch
Message-ID: <48F4F725.1010504@redhat.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F10/services_rshd.patch

rshd needs kill capability

Connects to ports 600-1023 (rpc ports)

Needs to be defined as an auth_login_pgm_domain

Searches logs

uses kerberos cache and keytabs

Sends unconfined_processes signals.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkj09yUACgkQrlYvE4MpobOQDACg64jTLEmo0tfEc+S2LwTZW+NI
NjQAn13UAtiZZ2kXDv6lsAQCvHQVQh+n
=S+ke
-----END PGP SIGNATURE-----