From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Fri, 12 Jun 2009 15:44:19 -0400 Subject: [refpolicy] services_rsync.patch In-Reply-To: <4A2DB545.4030605@redhat.com> References: <4A2DB545.4030605@redhat.com> Message-ID: <1244835859.4230.527.camel@gorn.columbia.tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On Mon, 2009-06-08 at 21:05 -0400, Daniel J Walsh wrote: > http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_rsync.patch > > Add client capabilities. I disagree with this part. This policy is for the server only. Clients should run in the calling domain, for example the user's domain. > Allow export of nfs files over rsync merged this. -- Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150