On Thu, 2008-08-07 at 11:11 -0400, Daniel J Walsh wrote: > Christopher J. PeBenito wrote: > > On Mon, 2008-08-04 at 14:35 +0200, david@xxxxxxxxxxx wrote: > >> plain text document attachment (policy_modules_admin_brctl.patch) > >> One minor change > > > > I need justification for this change. > > > >> Index: refpolicy/policy/modules/admin/brctl.te > >> =================================================================== > >> --- refpolicy.orig/policy/modules/admin/brctl.te 2008-08-03 16:47:00.000000000 +0200 > >> +++ refpolicy/policy/modules/admin/brctl.te 2008-08-03 18:01:42.000000000 +0200 > >> @@ -33,6 +33,8 @@ > >> > >> files_read_etc_files(brctl_t) > >> > >> +term_use_console(brctl_t) > >> + > >> libs_use_ld_so(brctl_t) > >> libs_use_shared_libs(brctl_t) > >> > >> > I believe this comes from libvirt or qemu interacting with the console. Sounds like this should be dontaudited instead. -- Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
