5:43 p.m.
On 02/23/12 14:59, Ade Lee wrote:
Please review.
_______________________________________________
Pki-devel mailing list
Pki-devel(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-devel
ACK
* applied patch to freshly pulled repo (Dogtag 10)
* built and installed new 'pki-core' components (specifically
'pki-selinux')
* successfully restarted 'pki-ca' instance
* successfully enrolled for a certificate
* sudo audit2allow -R -i /var/log/audit/audit.log
require {
type pki_kra_t;
type certwatch_t;
type pki_ca_t;
}
#============= certwatch_t ==============
files_read_var_files(certwatch_t)
#============= pki_ca_t ==============
fs_getattr_xattr_fs(pki_ca_t)
#============= pki_kra_t ==============
fs_getattr_xattr_fs(pki_kra_t)
* sudo audit2allow -R -i /var/log/audit/audit.log | grep pki
type pki_kra_t;
type pki_ca_t;
#============= pki_ca_t ==============
fs_getattr_xattr_fs(pki_ca_t)
#============= pki_kra_t ==============
fs_getattr_xattr_fs(pki_kra_t)
6:07 p.m.
On 02/23/12 15:43, Matthew Harmsen wrote:
On 02/23/12 14:59, Ade Lee wrote:
> Please review.
>
>
> _______________________________________________
> Pki-devel mailing list
> Pki-devel(a)redhat.com
> https://www.redhat.com/mailman/listinfo/pki-devel
ACK
* applied patch to freshly pulled repo (Dogtag 10)
This was all performed on a
64-bit Fedora 16 machine.
* built and installed new 'pki-core' components (specifically
'pki-selinux')
* successfully restarted 'pki-ca' instance
* successfully enrolled for a certificate
* sudo audit2allow -R -i /var/log/audit/audit.log
require {
type pki_kra_t;
type certwatch_t;
type pki_ca_t;
}
#============= certwatch_t ==============
files_read_var_files(certwatch_t)
#============= pki_ca_t ==============
fs_getattr_xattr_fs(pki_ca_t)
#============= pki_kra_t ==============
fs_getattr_xattr_fs(pki_kra_t)
* sudo audit2allow -R -i /var/log/audit/audit.log | grep pki
type pki_kra_t;
type pki_ca_t;
#============= pki_ca_t ==============
fs_getattr_xattr_fs(pki_ca_t)
#============= pki_kra_t ==============
fs_getattr_xattr_fs(pki_kra_t)
_______________________________________________
Pki-devel mailing list
Pki-devel(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-devel
9:14 p.m.
pushed to dogtag-10 and dogtag-9
On Thu, 2012-02-23 at 16:07 -0800, Matthew Harmsen wrote:
On 02/23/12 15:43, Matthew Harmsen wrote:
> On 02/23/12 14:59, Ade Lee wrote:
> > Please review.
> >
> >
> > _______________________________________________
> > Pki-devel mailing list
> > Pki-devel(a)redhat.com
> > https://www.redhat.com/mailman/listinfo/pki-devel
> ACK
>
> * applied patch to freshly pulled repo (Dogtag 10)
This was all performed on a 64-bit Fedora 16 machine.
> * built and installed new 'pki-core' components (specifically
> 'pki-selinux')
> * successfully restarted 'pki-ca' instance
> * successfully enrolled for a certificate
> * sudo audit2allow -R -i /var/log/audit/audit.log
>
> require {
> type pki_kra_t;
> type certwatch_t;
> type pki_ca_t;
> }
>
> #============= certwatch_t ==============
> files_read_var_files(certwatch_t)
>
> #============= pki_ca_t ==============
> fs_getattr_xattr_fs(pki_ca_t)
>
> #============= pki_kra_t ==============
> fs_getattr_xattr_fs(pki_kra_t)
>
> * sudo audit2allow -R -i /var/log/audit/audit.log | grep pki
> type pki_kra_t;
> type pki_ca_t;
> #============= pki_ca_t ==============
> fs_getattr_xattr_fs(pki_ca_t)
> #============= pki_kra_t ==============
> fs_getattr_xattr_fs(pki_kra_t)
>
>
>
> _______________________________________________
> Pki-devel mailing list
> Pki-devel(a)redhat.com
> https://www.redhat.com/mailman/listinfo/pki-devel
4998
days inactive
4999
days old
3 comments
2 participants
participants (2)
-
Ade Lee -
Matthew Harmsen