Re: [Pki-devel] [PATCH] 020 - selinux changes for ephemeral ports

On 02/23/12 15:43, Matthew Harmsen wrote: > On 02/23/12 14:59, Ade Lee wrote: > > Please review. > > > > > > _______________________________________________ > > Pki-devel mailing list > > Pki-devel(a)redhat.com > > https://www.redhat.com/mailman/listinfo/pki-devel > ACK > > * applied patch to freshly pulled repo (Dogtag 10) This was all performed on a 64-bit Fedora 16 machine. > * built and installed new 'pki-core' components (specifically > 'pki-selinux') > * successfully restarted 'pki-ca' instance > * successfully enrolled for a certificate > * sudo audit2allow -R -i /var/log/audit/audit.log > > require { > type pki_kra_t; > type certwatch_t; > type pki_ca_t; > } > > #============= certwatch_t ============== > files_read_var_files(certwatch_t) > > #============= pki_ca_t ============== > fs_getattr_xattr_fs(pki_ca_t) > > #============= pki_kra_t ============== > fs_getattr_xattr_fs(pki_kra_t) > > * sudo audit2allow -R -i /var/log/audit/audit.log | grep pki > type pki_kra_t; > type pki_ca_t; > #============= pki_ca_t ============== > fs_getattr_xattr_fs(pki_ca_t) > #============= pki_kra_t ============== > fs_getattr_xattr_fs(pki_kra_t) > > > > _______________________________________________ > Pki-devel mailing list > Pki-devel(a)redhat.com > https://www.redhat.com/mailman/listinfo/pki-devel