On 02/23/12 14:59, Ade Lee wrote:
Please review.
_______________________________________________ Pki-devel mailing list Pki-devel@redhat.com https://www.redhat.com/mailman/listinfo/pki-devel ACK
* applied patch to freshly pulled repo (Dogtag 10) * built and installed new 'pki-core' components (specifically 'pki-selinux') * successfully restarted 'pki-ca' instance * successfully enrolled for a certificate * sudo audit2allow -R -i /var/log/audit/audit.log require { type pki_kra_t; type certwatch_t; type pki_ca_t; } #============= certwatch_t ============== files_read_var_files(certwatch_t) #============= pki_ca_t ============== fs_getattr_xattr_fs(pki_ca_t) #============= pki_kra_t ============== fs_getattr_xattr_fs(pki_kra_t) * sudo audit2allow -R -i /var/log/audit/audit.log | grep pki type pki_kra_t; type pki_ca_t; #============= pki_ca_t ============== fs_getattr_xattr_fs(pki_ca_t) #============= pki_kra_t ============== fs_getattr_xattr_fs(pki_kra_t)