On Fri, 23 Jul 2010, Stephen Smalley wrote: > On Fri, 2010-07-23 at 11:44 -0400, Eric Paris wrote: > > execmod "could" show up on non regular files and non chr files. The current > > implementation would actually make these checks against non-existant bits > > since the code assumes the execmod permission is same for all file types. > > To make this line up for chr files we had to define execute_no_trans and > > entrypoint permissions. These permissions are unreachable and only existed > > to to make FILE__EXECMOD and CHR_FILE__EXECMOD the same. This patch drops > > those needless perms as well. > > > > Signed-off-by: Eric Paris <eparis@xxxxxxxxxx> > > Acked-by: Stephen D. Smalley <sds@xxxxxxxxxxxxx> > for the entire series. Although I think I already did that before. Thanks, all applied. -- James Morris <jmorris@xxxxxxxxx> -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
