Gentoo Archives: gentoo-hardened

From: Alain Toussaint <alain.toussaint@××××××××.ca>
To: gentoo-hardened@l.g.o
Subject: [gentoo-hardened] samba 4 MLS --> strict modules
Date: Sat, 14 Apr 2012 14:42:41
Message-Id: 6834c028046227d32e9a94451c4e9a97@mail.gmail.com
1 In the samba 4 howto, the instructions related to selinux apply to RH and
2 when I tried to compile this modules, I had an error because I'm running
3 in strict mode and semodule tell me it's an MLS modules. What do I need to
4 modify to this module to run it in strict mode?
5
6 Thanks
7 Alain
8
9
10 module samba4 1.0;
11
12
13 require {
14 type ntpd_t;
15 type usr_t;
16 type initrc_t;
17 class sock_file write;
18 class unix_stream_socket connectto;
19 }
20
21 #============= ntpd_t ==============
22 allow ntpd_t usr_t:sock_file write;
23
24 #============= ntpd_t ==============
25 allow ntpd_t initrc_t:unix_stream_socket connectto;

Replies

Subject Author
Re: [gentoo-hardened] samba 4 MLS --> strict modules Sven Vermeulen <swift@g.o>