From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Wed, 16 Feb 2011 09:45:16 -0500
Subject: [refpolicy] [PATCH 1/1] Without allow siginh,
 we get a huge timeout wait period (15 seconds)
In-Reply-To: <4D5BDFA4.2090400@tresys.com>
References: <20110206151633.GA13056@siphos.be> <4D593FB4.5030307@tresys.com>
	<20110214190352.GC13533@siphos.be> <4D5BDFA4.2090400@tresys.com>
Message-ID: <4D5BE2FC.7050000@tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 02/16/11 09:31, Christopher J. PeBenito wrote:
> On 02/14/11 14:03, Sven Vermeulen wrote:
>> On Mon, Feb 14, 2011 at 09:44:04AM -0500, Christopher J. PeBenito wrote:

>> I'm trying to find some information on the SIGINH but am failing
>> tremendously (all that I can find is that SELinux dontaudit's it and the
>> fact that many people don't know that). What is siginh?
> 
> Signal inheritance across exec().

More specifically, across domain transition.  So if siginh is denied, no
signals are inherited.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com