From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Wed, 23 Mar 2011 09:33:34 -0400
Subject: [refpolicy] [patch 1/1] selinuxutil: run_init and newrole talk
 with dbus
In-Reply-To: <4D87C3DE.8020605@redhat.com>
References: <4D6F74BA.4060507@redhat.com> <4D875A3E.9000200@tresys.com>
	<4D87C3DE.8020605@redhat.com>
Message-ID: <4D89F6AE.3030606@tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 03/21/11 17:32, Daniel J Walsh wrote:
> On 03/21/2011 10:01 AM, Christopher J. PeBenito wrote:
>> On 03/03/11 06:00, Miroslav Grepl wrote:
>>> http://mgrepl.fedorapeople.org/F15/system_selinuxutil.patch
>>>
>>>      * run_init and newrole need to talk with dbus during using
>>> "run_init service ipr... restart"
> 
>> Why would they do that?  Run_init has no dbus code.  That also doesn't
>> explain newrole.
> 
> 
> Pam modules pam_fprintd I believe is causing this.

Then there definitely needs to be a tunable.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com