2008-09-24 20:53:02

by Daniel Walsh

Subject: [refpolicy] flask_access_vectors.patch

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F10/flask_access_vectors.patch

Add nlmsg_tty_audit for netlink_audit_socket.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkjaqK4ACgkQrlYvE4MpobNKSgCeJNFJeI1zyEPptE2SFpob3g3N
jUIAnj85ztp+yVBuXQYpk/StiaSpi0Wt
=6GGK
-----END PGP SIGNATURE-----

2008-10-06 18:35:25

by cpebenito

Subject: [refpolicy] flask_access_vectors.patch

On Wed, 2008-09-24 at 16:53 -0400, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F10/flask_access_vectors.patch
>
> Add nlmsg_tty_audit for netlink_audit_socket.

Is there a reference for this? I don't remember seeing anything on the
main SELinux list.

--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

2008-10-06 19:52:11

by Daniel Walsh

Subject: [refpolicy] flask_access_vectors.patch

Christopher J. PeBenito wrote:
> On Wed, 2008-09-24 at 16:53 -0400, Daniel J Walsh wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F10/flask_access_vectors.patch
>>
>> Add nlmsg_tty_audit for netlink_audit_socket.
>
> Is there a reference for this? I don't remember seeing anything on the
> main SELinux list.
>
This comes from the new auditing keystroke patch to the kernel. Not sure
if this was talked about on selinux or just audit list.


Added sgrubb since I am not sure he is on the refpolicy list.