Re: [Freeipa-devel] [PATCH] 331 Update SELinux policy for dogtag10

2012-11-30 Thread Rob Crittenden
Martin Kosek wrote: On 11/06/2012 10:25 AM, Martin Kosek wrote: Incorporate SELinux policy changes introduced in Dogtag 10 in IPA SELinux policy: - dogtag10 now runs with pki_tomcat_t context instead of pki_ca_t - certmonger related rule are now integrated in system policy and can be removed

Re: [Freeipa-devel] [PATCH] 331 Update SELinux policy for dogtag10

2012-11-06 Thread Martin Kosek
On 11/06/2012 10:25 AM, Martin Kosek wrote: Incorporate SELinux policy changes introduced in Dogtag 10 in IPA SELinux policy: - dogtag10 now runs with pki_tomcat_t context instead of pki_ca_t - certmonger related rule are now integrated in system policy and can be removed from IPA policy