From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Wed, 11 Mar 2009 10:53:43 -0400
Subject: [refpolicy] roles_auditadm.patch
In-Reply-To: <49AFFCA6.2070205@redhat.com>
References: <49AFFCA6.2070205@redhat.com>
Message-ID: <1236783227.17032.256.camel@gorn>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Thu, 2009-03-05 at 12:24 -0400, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F11/roles_auditadm.patch
> 
> Cleanup auditadm
> 
> auditadm should not have all these roles, needs to read kernel ring
> buffer (dmesg?)

Merged, except I kept screen, su, and sudo, which I feel are reasonable
apps for auditadm to use.

Yes, dmesg is a tool for reading the kernel ring buffer.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150