Bug 34672 – clockspeed policy files

• Status: RESOLVED TEST-REQUEST
• Product: Gentoo Linux

[Description petre rodan (RETIRED) 2003-11-28 23:36:14 UTC]

net-misc/clockspeed policy files.

the default emerge sets some very strange locations for files needed by this application. a fifo in /usr/adjust, a normal file in /usr/etc/atto, another in /etc/leapsecs.dat
the policy file is a little bloated because of this. I will look into this matter the next week.

[Comment 1 petre rodan (RETIRED) 2003-11-28 23:36:47 UTC]

Created attachment 21452 [details]
file_contexts

[Comment 2 petre rodan (RETIRED) 2003-11-28 23:37:24 UTC]

Created attachment 21453 [details]
type_enforcement file

[Comment 3 petre rodan (RETIRED) 2003-11-29 09:43:54 UTC]

if 
http://bugs.gentoo.org/show_bug.cgi?id=34708

is accepted the policy (and my filesystem) should look a lot better ;)

[Comment 4 Chris PeBenito (RETIRED) 2003-11-29 19:24:59 UTC]

leaving the depend on 34708, so I know what policy to put in portage

[Comment 5 petre rodan (RETIRED) 2003-12-12 01:56:54 UTC]

Created attachment 22074 [details]
type enforcement

updated as per #34708

[Comment 6 petre rodan (RETIRED) 2003-12-12 01:57:42 UTC]

Created attachment 22075 [details]
file contexts

updated as per #34708

[Comment 7 petre rodan (RETIRED) 2003-12-12 01:59:05 UTC]

net_contexts should also contain

ifdef(`clockspeed.te', `portcon udp 4014  system_u:object_r:clockspeed_port_t')

[Comment 8 petre rodan (RETIRED) 2003-12-12 08:20:53 UTC]

Created attachment 22090 [details]
file contexts

 _clockspeed_ file contexts ;)
 where is my coffee?

[Comment 9 Chris PeBenito (RETIRED) 2003-12-12 09:39:57 UTC]

Try using var_lib_domain macro so we can use clockspeed_var_lib_t.  var_lib_clockspeed_t is inconsistent with other domains.  Russell and I will be cleaning this stuff up, and getting new policy with that already done would be better :)

[Comment 10 petre rodan (RETIRED) 2003-12-12 12:05:41 UTC]

Created attachment 22096 [details]
file contexts

var_lib_domain(c) compatible :)

[Comment 11 petre rodan (RETIRED) 2003-12-12 12:07:12 UTC]

Created attachment 22097 [details]
type enforcement

needs var_lib_domain(c) 9x,NT or better

[Comment 12 Chris PeBenito (RETIRED) 2003-12-21 10:07:32 UTC]

committed to portage

[Comment 13 petre rodan (RETIRED) 2003-12-22 02:58:43 UTC]

selinux-clockspeed-20031221.tar.bz2 is not present on any mirror, so the emerge fails right now.

i'll try again later

[Comment 14 Chris PeBenito (RETIRED) 2003-12-29 15:18:03 UTC]

on mirrors for a while :)

[Comment 15 petre rodan (RETIRED) 2003-12-29 23:21:31 UTC]

sorry for the delay
it works, thanks for the ebuild.

bye,
peter