From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Mon, 23 Mar 2009 15:00:11 -0400
Subject: [refpolicy] services_smartmon.patch
In-Reply-To: <49C7D180.90506@redhat.com>
References: <49B005EB.4060109@redhat.com>
	<1237821858.6079.10.camel@gorn.columbia.tresys.com>
	<49C7D180.90506@redhat.com>
Message-ID: <1237834811.6079.28.camel@gorn.columbia.tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Mon, 2009-03-23 at 14:14 -0400, Daniel J Walsh wrote:
> On 03/23/2009 11:24 AM, Christopher J. PeBenito wrote:
> > On Thu, 2009-03-05 at 13:03 -0400, Daniel J Walsh wrote:
> >> http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_smartmon.patch
> >>
> >> smartmon needs to be ranged.
> >>
> >> Has the ability to create files with the correct context
> >
> > Why is this managing fixed disks?  I thought it was only monitoring
> > disks.
> >
> Search for this line in the os_linux.cpp file
> 
> /* This function will setup and fix device nodes for a 3ware controller. */

I prefer this to be conditional, so the majority of people without 3ware
controllers can be safe from additional raw disk access.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150