2008-10-14 19:46:45

by Daniel Walsh

Subject: [refpolicy] services_rshd.patch

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F10/services_rshd.patch

rshd needs kill capability

Connects to ports 600-1023 (rpc ports)

Needs to be defined as an auth_login_pgm_domain

Searches logs

uses kerberos cache and keytabs

Sends unconfined_processes signals.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkj09yUACgkQrlYvE4MpobOQDACg64jTLEmo0tfEc+S2LwTZW+NI
NjQAn13UAtiZZ2kXDv6lsAQCvHQVQh+n
=S+ke
-----END PGP SIGNATURE-----

2008-11-18 20:04:36

by cpebenito

Subject: [refpolicy] services_rshd.patch

On Tue, 2008-10-14 at 15:46 -0400, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F10/services_rshd.patch
>
> rshd needs kill capability
>
> Connects to ports 600-1023 (rpc ports)
>
> Needs to be defined as an auth_login_pgm_domain
>
> Searches logs
>
> uses kerberos cache and keytabs
>
> Sends unconfined_processes signals.

Merged.

--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150