Re: Yubikey policy for review

[Miroslav Grepl <mgrepl@xxxxxxxxxx>]

On 04/02/2014 02:34 PM, Daniel J Walsh wrote:

Sometimes it is better to keep the complexity of the policy down, rather then a minor increase in security.

On 04/01/2014 07:53 PM, William Brown wrote:

Hi,

I have made the changes to the policy as suggested my Miroslav.

The reason I initially made two boolean's rather than one, is that OTP
doesn't need the permissions granted by CHAP, and vice versa.

--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux

--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux

Yes.

I like the latest version ... going to add it.

--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux