Re: [Audit-test-developer] [PATCH 6/8] Add lspp_harness_devpts_t type

[Ramon de C. V. <rc...@li...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Paul,

On 03/03/2011 07:30 PM, Paul Moore wrote:
> On Thursday, March 03, 2011 7:42:23 AM Ramon de Carvalho Valle wrote:
>> Hi Paul,
>>
>> The same as the lspp_harness_devpts_t type. However, it would be good to
>> check if it is still being used by the mls syscall test cases.
> 
> Similar questions as to the temporary file type ...
For this type, it has been previously created by
userdom_admin_user_template > userdom_login_user_template >
userdom_base_user_template. However, at some point in time, it was
removed from userdom_base_user_template. An implementation of this
interface containing such references can still be found in the
Certifiable Linux Integration Platform (CLIP) repository at
http://oss.tresys.com/projects/clip/browser/trunk/RHEL5.4/refpolicy/src/selinux-policy-clip/policy/modules/system/userdomain.if#L41

> 
>> On 03/02/2011 08:39 PM, Paul Moore wrote:
>>> On Tuesday, March 01, 2011 12:55:38 PM Ramon de Carvalho Valle wrote:
>>>> From: Ramon de Carvalho Valle <rc...@br...>
>>>>
>>>> Signed-off-by: Ramon de Carvalho Valle <rc...@br...>
>>>> ---
>>>>
>>>>  audit/utils/selinux-policy/lspp_test.te |    1 +
>>>>  1 files changed, 1 insertions(+), 0 deletions(-)
>>>>
>>>> diff --git a/audit/utils/selinux-policy/lspp_test.te
>>>> b/audit/utils/selinux-policy/lspp_test.te index a423055..a07e246 100644
>>>> --- a/audit/utils/selinux-policy/lspp_test.te
>>>> +++ b/audit/utils/selinux-policy/lspp_test.te
>>>> @@ -72,6 +72,7 @@ corecmd_executable_file(lspp_harness_exec_t)
>>>>
>>>>  domain_entry_file(lspp_harness_t,lspp_harness_exec_t)
>>>>  type lspp_harness_tmp_t;
>>>>  files_tmp_file(lspp_harness_tmp_t);
>>>>
>>>> +type lspp_harness_devpts_t;
>>>
>>> Why is this type needed?
>>>
>>>>  # generic test domain (no MLS overrides)
>>>>  userdom_unpriv_user_template(lspp_test_generic)
> 
> 
> --
> paul moore
> linux @ hp
> 

- -- 
Ramon de Carvalho Valle
Security Engineer
IBM Linux Technology Center
rc...@li...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAk10+iUACgkQGIS0iEuhp4OsbACgmBunTxS0DjgLyROk52CY9QyP
NwoAoMOzKc/4PXKgPU6XhVJuZ3Dta+v/iEYEARECAAYFAk10+iUACgkQkcIYeh81
wLmsbACfUPx1x/SnuOtVlAJg718BANsu4K0AnjyRLlLx/ESVSMw8suxz5S/oQY8Q
=4o7I
-----END PGP SIGNATURE-----