[prev in list] [next in list] [prev in thread] [next in thread] 

List:       selinux
Subject:    Re: I am more worried about open then read and write, SELinux needs open access checks.
From:       Steve G <linux_4ever () yahoo ! com>
Date:       2008-01-24 18:48:47
Message-ID: 964182.26945.qm () web51502 ! mail ! re2 ! yahoo ! com
[Download RAW message or body]

> I would like to propose that we add one or more avc's to deal with
> opening a file.  open or open_read open_write.  


There are situations where apps should only do an open_append to make sure they don't \
erase anything. syslog, auditd, apache are a few apps that come to mind.

-Steve



      ____________________________________________________________________________________
 Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  \
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ 


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.


[prev in list] [next in list] [prev in thread] [next in thread]