]> git.ipfire.org Git - people/stevee/selinux-policy.git/commit - Changelog
Hadoop cleanup and module version bump.
authorChris PeBenito <pebenito@gentoo.org>
Thu, 7 Oct 2010 14:57:55 +0000 (10:57 -0400)
committerChris PeBenito <pebenito@gentoo.org>
Thu, 7 Oct 2010 14:57:55 +0000 (10:57 -0400)
commit641ac05468bd0ef690ed42099238e8dfa29b4dfa
tree2a5460a4ee2544d3f5b4f7b788e43422ecaece53
parentbc71a042d84f170f736a679c5808351af9339e97
Hadoop cleanup and module version bump.
* a pass cleaning up the style.
* adjusted some regular expressions in the file contexts: .* is the same as (.*)? since * means 0 or more matches.
* renamed a few interfaces
* two rules that I dropped as they require further explanation

> +files_read_all_files(hadoop_t)

A very big privilege.

and

> +fs_associate(hadoop_tasktracker_t)

This is a domain, so the only files with this type should be the /proc/pid ones, which don't require associate permissions.
Changelog
policy/modules/kernel/corenetwork.te.in
policy/modules/roles/sysadm.te
policy/modules/services/hadoop.fc
policy/modules/services/hadoop.if
policy/modules/services/hadoop.te
policy/modules/system/unconfined.te