[PATCH] Modify audit2why analyze function to use loaded policy

2016-06-02 Thread Joshua Brindle
Class and perms should come from the policy being used for analysis, not the system policy so use sepol_ interfaces Change-Id: Ia0590ed2514249fd98810a8d4fe87f8bf5280561 --- libselinux/src/audit2why.c | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git

Re: XWindows and CLIP?

2016-06-02 Thread Joshua Brindle
John Chludzinski wrote: What are the issues with XWindows and CLIP? Why is CLIP XWindow-less? CLIP strives to be a minimal system suited to secure solutions and does not come with software not necessary for such systems (e.g., cross domain solutions). Is there something inherently

Re: Possible problem with e6afc8ac ("udp: remove headers from UDP packets before queueing")

2016-06-02 Thread Paul Moore
On Wed, Jun 1, 2016 at 4:44 PM, Stephen Smalley wrote: > On 06/01/2016 03:18 PM, Eric Dumazet wrote: >> On Wed, 2016-06-01 at 15:01 -0400, Paul Moore wrote: >>> Hello, >>> >>> I'm currently trying to debug a problem with 4.7-rc1 and labeled >>> networking over UDP. I'm having

XWindows and CLIP?

2016-06-02 Thread John Chludzinski
What are the issues with XWindows and CLIP? Why is CLIP XWindow-less? Is there something inherently unsecure with the XWindow client/server model? ___ Selinux mailing list Selinux@tycho.nsa.gov To unsubscribe, send email to

Re: [RFC 1/2] selinux: Stop looking up dentries from inodes

2016-06-02 Thread Andreas Gruenbacher
On Wed, Jun 1, 2016 at 3:44 PM, Stephen Smalley wrote: > On 05/31/2016 11:22 AM, Andreas Gruenbacher wrote: >> With that fixed, could you possibly put this change to test? > > Falls over during boot in generic_getxattr(), which still needs a > non-NULL dentry in the

[PATCH] Sort object files for deterministic linking order

2016-06-02 Thread Laurent Bigonville
From: Laurent Bigonville This patch is part of the Debian effort to make the build reproducible Thank to Reiner Herrmann for the patches Signed-off-by: Laurent Bigonville --- libselinux/src/Makefile | 2 +- libsemanage/src/Makefile | 2 +-