From: dac.override@gmail.com (Dominick Grift) Date: Wed, 27 Apr 2016 11:42:11 +0200 Subject: [refpolicy] [PATCH 1/1] Add hwloc-dump-hwdata SELinux policy In-Reply-To: <1e313b9b-ccd9-c26d-d3ad-c7f2a1da6f63@gmail.com> References: <1461745535-6857-1-git-send-email-grzegorz.andrejczuk@intel.com> <1e313b9b-ccd9-c26d-d3ad-c7f2a1da6f63@gmail.com> Message-ID: To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 04/27/2016 11:40 AM, Dominick Grift wrote: > On 04/27/2016 10:25 AM, gandrejc wrote: >> From: Grzegorz Andrejczuk > >> New hwloc utility (hwloc-dump-hwdata) reads firmware entries and >> generates intermediate files to be used later by hwloc utils. > >> This cannot be done when MLS is in enforicing mode because >> SELinux blocks access to var_run_t for user_t. > > See below how i think this should be implemented. If any > questions, let me know. > Looks like my mail client managed to mess up the lay-out... -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQGcBAEBCAAGBQJXIIlvAAoJECV0jlU3+UdpidIL/RViVKgZyhpolEw60PfRBt8g MBXVb7bB5rHOojSI89581LWSerAsuWqRf2d+lwOEBaXyamlhMZ7JtTkUZkRukngL ZsOxZ+eNAd2WUAkRb9Yufn3NDt/UDV+nzcTUjqz68OLAtxhrgbBVsv90XYP3rvAw aPy5AQOG60Y8XiYWj4KAmgJri8Kvv+g2ClEXarKdXiMjKERXgZIBX8nvdmllRMP4 Zl/9cLp6IQRHoio7vSvCugK0QvSnlcQBcHR1c+RyQd7h+9izDDuF2urRXl2Y+QA1 15M/ma/67uMR7IfQsGaczY8/hdT0Tl8qRbSBRsRtWch8NSe4frtEJJn1k1r3tFvJ fDXM92c67ihvKLgSW3oEod1urgtnmiOUFEBT82eixmitPr3xoLtIebRVFSWE0pV/ vbfwrDOwHBYm9BsJk6gcACFShh0y8iGuiUZzEdb9FQE8H1RHKU117QTOIY+mMuoi XMzt1gFt+gQQztlLcTt73AH5SXvig4lZhWFxW4ikDw== =8FjL -----END PGP SIGNATURE-----