-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 http://people.fedoraproject.org/~dwalsh/SELinux/F10/services_kerberos.patch kpropd policy Had to add a lot of policy to handle host_rcache_t files. Kerberos library, has builtin SELinux awareness that causes it to change the context of files it creates to the system default labeling. In general case we need to dontaudit calls of setfscreate and validation of the file context dns is done outside of kerberos and should not be allowed within the domain. For domains that create keytabs we need a template to allow them to label them properly. Allow userdomain and login programs to connect to kerberos master ports -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iEYEARECAAYFAkiguuQACgkQrlYvE4MpobOcXwCfRI116zquF4YFWpkNr0Mr9ikp X74AnijDJIgAvPMuwDWpO9f9TMDYCbI/ =YjwO -----END PGP SIGNATURE----- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
