On Thu, 2007-12-06 at 13:10 -0500, Daniel J Walsh wrote: > Christopher J. PeBenito wrote: > > On Tue, 2007-12-04 at 12:27 -0500, Daniel J Walsh wrote: > >> policy/modules/admin/alsa.te | 6 ++---- > >> policy/modules/admin/vpn.te | 10 ++-------- > >> policy/modules/apps/thunderbird.if | 15 ++------------- > >> policy/modules/services/apache.te | 2 ++ > >> policy/modules/services/mta.if | 13 ++----------- > >> policy/modules/services/postgresql.te | 10 ++-------- > >> policy/modules/services/rshd.te | 8 ++------ > >> policy/modules/services/samba.te | 14 ++------------ > >> policy/modules/services/sendmail.te | 14 ++------------ > >> policy/modules/services/xserver.te | 5 ----- > >> policy/modules/system/authlogin.te | 8 -------- > >> policy/modules/system/mount.te | 4 ---- > >> 12 files changed, 18 insertions(+), 91 deletions(-) > > > > I dropped the alsa, apache, because I think the nis/nscd that is > > currently in those are potentially wrong. Back in the example policy, > > there was some liberal usage of nis an nscd, and I suspect these are > > just carryovers. The netlink_route_socket usage provides a little more > > evidence. The other ones are merged. > > > Ok, greping through the source of alsa-utils shows no getpw. So I will > remove that policy and wait for the avc's. Sounds good. It'd be nice if we could get someone to verify the other nsswitch usage in the policy. Maybe we need some policy janitors... or interns :) -- Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
