From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Tue, 16 Feb 2010 09:58:47 -0500
Subject: [refpolicy] services_clogd.patch
In-Reply-To: <4AFC7BBC.50008@redhat.com>
References: <4AFC7BBC.50008@redhat.com>
Message-ID: <1266332327.11004.58.camel@gorn.columbia.tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Thu, 2009-11-12 at 16:18 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F12/services_clogd.patch
> 
> new policy for clogd from Miroslav Grepl

Why does this have raw disk access?

I suspect that the tmpfs should go with the shm access.  If that is the
case, clogd_manage_tmpfs_files() should be merged into clogd_rw_shm().


-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150