From: sven.vermeulen@siphos.be (Sven Vermeulen) Date: Sat, 17 Aug 2013 20:51:39 +0200 Subject: [refpolicy] [PATCH 0/7] Small set of updates on non-contrib modules Message-ID: <1376765506-28924-1-git-send-email-sven.vermeulen@siphos.be> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Not sure about patch 5/7 if this is wanted/needed. It just seems like a good idea to combine the rights as the dontaudit interface itself is meant to, well, ignore certain behavior of applications. With the move to /sys/fs/selinux, these applications would otherwise also need the dontaudit rules against the sysfs parts, so I thought that making them part of the same dontaudit interface makes sense. Sven Vermeulen (7): Get grub2-install to work properly Support /sys/devices/system/cpu/online Mark f2fs as a xattr-enabled file system The security_t file system can be at /sys/fs/selinux Dontaudit access on security_t file system at /sys/fs/selinux Support named file transition for fixed_disk_device_t Alsasound init script writes asound.state file policy/modules/admin/bootloader.fc | 2 ++ policy/modules/kernel/devices.fc | 1 + policy/modules/kernel/devices.if | 61 +++++++++++++++++++++++++++++++++++++ policy/modules/kernel/devices.te | 7 +++++ policy/modules/kernel/domain.te | 2 ++ policy/modules/kernel/filesystem.te | 1 + policy/modules/kernel/selinux.if | 8 +++++ policy/modules/kernel/storage.if | 7 ++++- policy/modules/system/init.te | 4 +++ 9 files changed, 92 insertions(+), 1 deletion(-) -- 1.8.1.5