From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Fri, 18 May 2012 14:20:19 -0400 Subject: [refpolicy] [4/4] sepgsql -redefinition of use permission onto system objects In-Reply-To: References: <4FA3FAE4.8010803@tresys.com> <4FABB8BF.2070201@tresys.com> Message-ID: <4FB692E3.9050704@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 05/11/12 09:17, Kohei KaiGai wrote: > 2012/5/10 Christopher J. PeBenito : >> On 05/04/12 13:24, Kohei KaiGai wrote: >>> 2012/5/4 Christopher J. PeBenito : >>>> On 05/04/12 09:33, Kohei KaiGai wrote: >>>>> The patch 3 of 4 also required the 4 of 4 being refreshed to apply correctly. >>>>> In addition, I forgot to allow sepgsql_admin_type to allow to "use" system >>>>> objects. >>>>> >>>>> Please check the newer version. Thanks, >>>> >>>> Looks like the revised patch is missing. >>>> >>> Sorry, it is the attached one. >>> >>> Thanks, >> >> This one doesn't apply, the last hunk fails. I also had a problem with the 3rd patch, as the contrib hunk stopped it from applying too. >> > Sorry, I generated the series of patches based on the latest refpolicy and > contrib tree. > > And, I added "0of4" patch that fixes bugs in MLS/MCS that I noticed during > regression test efforts. MCS rules are defined twice for db_language class > in spite of db_schema being forgotten, and "entrypoint" permission was not > restricted at both of MCS / MLS policy. > > Here is no updates on part-1 ~ part-4 except for patch rebasing. Merged. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com