On Sun, 2004-09-19 at 17:04, Russell Coker wrote:
> On Sun, 19 Sep 2004 23:08, Chris PeBenito <pebenito@gentoo.org> wrote:
> > > +allow initrc_t etc_runtime_t:dir read;
> > >
> > > Your patch doesn't include any .fc entries to label a directory as
> > > etc_runtime_t.
> >
> > This is going to appear in my types.fc patch. The directory I'm
> > referring to is not specific to initrc.
>
> What is the purpose of a etc_runtime_t directory? Currently any process that
> can create files as etc_runtime_t can write to a directory labelled as etc_t.

Good point, I'll send an updated patch when sourceforge cvs starts responding again for me. I guess I got a little overzealous on the labeling.

> Are you planning to change that?

No, unless I can think of (or someone tells me) a reason to do that.

-- 
Chris PeBenito
<pebenito@gentoo.org>
Developer,
Hardened Gentoo Linux
Embedded Gentoo Linux
 
Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
Key fingerprint = B0E6 877A 883F A57A 8E6A  CB00 BC8E E42D E6AF 9243



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.



application/pgp-signature attachment: This is a digitally signed message part