From: dwalsh@redhat.com (Daniel J Walsh) Date: Mon, 02 Mar 2009 17:36:26 -0500 Subject: [refpolicy] system_udev.patch Message-ID: <49AC5F6A.6070301@redhat.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 http://people.fedoraproject.org/~dwalsh/SELinux/F11/system_udev.patch Add file context for /var/run/PackageKit/udev Switch interfaces to use udev_tbl_t udev can exec helper apps Searches dbugfs Reads software raid, sends audit messages Reads also lib Executes the clock Reads devicekit pid file. Executes lvm commands Search rm log files We run it unconfined on Fedora. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iEYEARECAAYFAkmsX2oACgkQrlYvE4MpobNiUwCgwRX2BipvynvZr2pUtZvqvE5m 7P8An20CYCm/IzoEf3YBAWHTJnyyb4Nf =pmiP -----END PGP SIGNATURE-----