Le mardi 16 septembre 2008 à 13:05 -0500, Manoj Srivastava a écrit :
> allow avahi_t httpd_t:dbus send_msg;
> allow hald_t pcscd_t:dbus send_msg;
> allow httpd_t avahi_t:dbus send_msg;
> allow httpd_t system_dbusd_t:dbus send_msg;
> allow insmod_t lib_t:file execute_no_trans;
> allow mdadm_t device_t:blk_file { read ioctl };
> allow mdadm_t file_t:dir search;
> allow pcscd_t hald_t:dbus send_msg;
> allow pcscd_t system_dbusd_t:dbus send_msg;
>
> I have not tried to boot into enforcing mode, but I am not sure
> which of these are actually needed, and which can safely be denied
> anyway.
If any of these are useless, why don’t you file corresponding bugs?
--
.''`.
: :' : We are debian.org. Lower your prices, surrender your code.
`. `' We will add your hardware and software distinctiveness to
`- our own. Resistance is futile.
Attachment:
signature.asc
Description: Ceci est une partie de message =?ISO-8859-1?Q?num=E9riquement?= =?ISO-8859-1?Q?_sign=E9e?=