2009-03-04 21:39:20

by Daniel Walsh

[permalink] [raw]
Subject: [refpolicy] apps_git.patch

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F11/apps_git.patch

New policy for git domain.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkmu9QgACgkQrlYvE4MpobMGygCfeZCyuGMAMRP95R2SH/sAmwCp
2CgAoJL26jf8+xZdytgOQDL+0MxIXPlI
=uWML
-----END PGP SIGNATURE-----


2009-03-19 13:27:53

by cpebenito

[permalink] [raw]
Subject: [refpolicy] apps_git.patch

On Wed, 2009-03-04 at 16:39 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F11/apps_git.patch
>
> New policy for git domain.

Is this really meant to be submitted? Its still permissive.

--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

2009-03-23 18:55:28

by Daniel Walsh

[permalink] [raw]
Subject: [refpolicy] apps_git.patch

On 03/19/2009 09:27 AM, Christopher J. PeBenito wrote:
> On Wed, 2009-03-04 at 16:39 -0500, Daniel J Walsh wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F11/apps_git.patch
>>
>> New policy for git domain.
>
> Is this really meant to be submitted? Its still permissive.
>
New domains in Fedora we are adding in permissive mode, so we can
collect avc messages without causing breakage. Upstream can remove the
permissive flag.

2009-04-07 14:37:13

by cpebenito

[permalink] [raw]
Subject: [refpolicy] apps_git.patch

On Mon, 2009-03-23 at 14:55 -0400, Daniel J Walsh wrote:
> On 03/19/2009 09:27 AM, Christopher J. PeBenito wrote:
> > On Wed, 2009-03-04 at 16:39 -0500, Daniel J Walsh wrote:
> >> http://people.fedoraproject.org/~dwalsh/SELinux/F11/apps_git.patch
> >>
> >> New policy for git domain.
> >
> > Is this really meant to be submitted? Its still permissive.
> >
> New domains in Fedora we are adding in permissive mode, so we can
> collect avc messages without causing breakage. Upstream can remove the
> permissive flag.

Merged in services layer since there will likely be a policy for a git
server.

--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150