dac_override with Cobbler

lejeczek <[email protected]> Thu, 2 Nov 2023 18:18:05 +0100
Newsgroups gmane.linux.redhat.fedora.selinux
Message-ID <[email protected]> 
This is a multi-part message in MIME format.
--===============7824732526560736123==
Content-Type: multipart/alternative;
 boundary="------------EeWeJa3TPVAaI9PDM1R10zLq"
Content-Language: en-US

This is a multi-part message in MIME format.
--------------EeWeJa3TPVAaI9PDM1R10zLq
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

Hi guys.

I wonder if someone might have seen _cobbler_ trying to 
claim this.
I've tried a few sebools but regardless SELinux denies cobbler:

#============= cobblerd_t ==============
allow cobblerd_t self:capability dac_override;

and from what I gather _dac_override_ is pretty big thing 
and I wonder if _cobbler_ should have it.

many thanks, L.
--------------EeWeJa3TPVAaI9PDM1R10zLq
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit

<!DOCTYPE html>
<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <font size="2" face="Courier 10 Pitch">Hi guys.<br>
      <br>
      I wonder if someone might have seen _cobbler_ trying to claim
      this.<br>
      I've tried a few sebools but regardless SELinux denies cobbler:<br>
      <br>
      #============= cobblerd_t ==============<br>
      allow cobblerd_t self:capability dac_override;<br>
      <br>
      and from what I gather _dac_override_ is pretty big thing and I
      wonder if _cobbler_ should have it.<br>
      <br>
      many thanks, L.<br>
    </font>
  </body>
</html>

--------------EeWeJa3TPVAaI9PDM1R10zLq--

--===============7824732526560736123==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline
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==

--===============7824732526560736123==--