Re: mdadm policy

[Colin Walters <walters@xxxxxxxxxx>]

On Fri, 2005-06-24 at 11:41 -0400, Ivan Gyurdiev wrote:

> Those rules are usually added to access /etc/fstab and
> /etc/mtab.

And all the other random libc files.

> > * self:capability dac_override ipc_lock
> This looks interesting...

Could potentially be a problem; it'd be useful to track down what part
of the code needed it.

> > * read_sysctl(mdadm_t)
> > * r_dir_file(mdadm_t, sysfs_t)

I'm not sure why your version wouldn't need this.

> > * read_locale(mdadm_t)

You probably don't need this because you're using the "C" locale, but
the Fedora default is UTF-8, so it needs access to the locale files.



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.