From: aranea@aixah.de (Luis Ressel) Date: Mon, 7 Mar 2016 16:18:38 +0100 Subject: [refpolicy] [PATCH v2] New policy for tboot utilities In-Reply-To: <56DD9A99.1080709@tresys.com> References: <1457218424-15243-1-git-send-email-aranea@aixah.de> <56DD9A99.1080709@tresys.com> Message-ID: <20160307161838.055f9be9@gentp.lnet> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On Mon, 7 Mar 2016 10:13:29 -0500 "Christopher J. PeBenito" wrote: > Are all of the utilities simple command line tools (the ones that may > need domains in the future)? If so, this interface doesn't seem > necessary. The role interfaces are usually for complicated apps that > have their own derived types e.g. for home directory content. > Yes, all of them are simple CLI tools. The ps_process_pattern() isn't really needed either, root has those permissions anyway. I'll send an updated patch. -- Regards, Luis Ressel -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 949 bytes Desc: OpenPGP digital signature Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20160307/30c40c91/attachment.bin