[refpolicy] [PATCH 0/2] Policy support for the new TUN hooks

Christopher J. PeBenito cpebenito at tresys.com
Mon Aug 31 08:04:38 CDT 2009


On Fri, 2009-08-28 at 17:13 -0400, Paul Moore wrote:
> Second, and hopefully final, version of the SELinux policy for the new TUN
> hooks.  This version includes all the feedback from Chris discussed on the
> list as well as my sign-off.

Merged.

> ---
> 
> Paul Moore (2):
>       refpol: Policy for the new TUN driver access controls
>       refpol: Add the "tun_socket" object class flask definitions
> 
> 
>  policy/flask/access_vectors         |    2 ++
>  policy/flask/security_classes       |    2 ++
>  policy/modules/admin/vpn.te         |    1 +
>  policy/modules/apps/qemu.if         |    3 +++
>  policy/modules/apps/uml.te          |    6 ++++++
>  policy/modules/services/openvpn.te  |    1 +
>  policy/modules/services/virt.if     |   19 +++++++++++++++++++
>  policy/modules/services/virt.te     |    1 +
>  policy/modules/system/userdomain.if |   23 +++++++++++++++++++++++
>  policy/modules/system/userdomain.te |    2 ++
>  10 files changed, 60 insertions(+), 0 deletions(-)
> _______________________________________________
> refpolicy mailing list
> refpolicy at oss.tresys.com
> http://oss.tresys.com/mailman/listinfo/refpolicy
-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150



More information about the refpolicy mailing list