From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Wed, 17 Mar 2010 11:59:29 -0400
Subject: [refpolicy] system_modutils.patch
In-Reply-To: <4B8445EE.3030508@redhat.com>
References: <4B8445EE.3030508@redhat.com>
Message-ID: <1268841569.13301.49.camel@gorn.columbia.tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Tue, 2010-02-23 at 16:17 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F13/system_modutils.patch
> 
> Lots of updated access for insmod

Why is this creating chr files?  Why are they device_t?

Why does it request load module, when it can load them itself?

Why does it mount rpc_pipefs?

Otherwise merged.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150