On Tuesday, December 18, 2012 05:53:37 PM Paul Moore wrote: > A refresh/respin of the LSM/SELinux fixes to work on top of Jason's > latest API tweak (now living in DaveM's net tree). In general, I > believe the hooks and thinking behind the v2 patchset still make sense > so no changes there, although I did change the SELinux permission from > "create_queue" to "attach_queue" to match the API changes. > > Comments are welcome and encouraged; we need to get this fixed before > 3.8 is released. SELinux (I'm looking at you Eric) and LSM folks - any comments/objections to these changes? > --- > > Paul Moore (2): > selinux: add the "attach_queue" permission to the "tun_socket" class > tun: fix LSM/SELinux labeling of tun/tap devices -- paul moore security and virtualization @ redhat -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
