selinux-policy-2.4.6-203.el5 and kernel_sendrecv_unlabeled_association

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Why is the following rule removed by the patch of the SRPM package
selinux-policy-2.4.6-203.el5?

# temporary hack until labeling on packets is supported
allow $1 unlabeled_t:packet { send recv };

The actual file is kernel/kernel.if and line 2170.

The comment above indicates that this is a temporary hack but I get some
AVCs and need to manually allow this rule.

Couldn't we accept the temporary hack until something more useful is
out? Because I (and guess some others too) need this rule.

cheers
Stefan

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux