Re: [Pki-devel] [PATCH] 020 - selinux changes for ephemeral ports

On 02/23/12 14:59, Ade Lee wrote: > Please review. > > > _______________________________________________ > Pki-devel mailing list > Pki-devel(a)redhat.com > https://www.redhat.com/mailman/listinfo/pki-devel ACK * applied patch to freshly pulled repo (Dogtag 10)

* built and installed new 'pki-core' components (specifically 'pki-selinux') * successfully restarted 'pki-ca' instance * successfully enrolled for a certificate * sudo audit2allow -R -i /var/log/audit/audit.log require { type pki_kra_t; type certwatch_t; type pki_ca_t; } #============= certwatch_t ============== files_read_var_files(certwatch_t) #============= pki_ca_t ============== fs_getattr_xattr_fs(pki_ca_t) #============= pki_kra_t ============== fs_getattr_xattr_fs(pki_kra_t) * sudo audit2allow -R -i /var/log/audit/audit.log | grep pki type pki_kra_t; type pki_ca_t; #============= pki_ca_t ============== fs_getattr_xattr_fs(pki_ca_t) #============= pki_kra_t ============== fs_getattr_xattr_fs(pki_kra_t) _______________________________________________ Pki-devel mailing list Pki-devel(a)redhat.com https://www.redhat.com/mailman/listinfo/pki-devel