Re: certmonger post-save scripts & certmonger_unconfined_t domain
Sam Morris <[email protected]> Thu, 6 Jun 2024 09:39:36 +0100
| Newsgroups | gmane.linux.redhat.fedora.selinux |
|---|---|
| Message-ID | <[email protected]> |
T24gV2VkLCBBcHIgMjgsIDIwMjEgYXQgMDI6NDM6MjlQTSArMDIwMCwgWmRlbmVrIFB5dGVsYSB3 cm90ZToNCj4gSWYgSSB1bmRlcnN0YW5kIGNvcnJlY3RseSwgeW91ciBwcm9ibGVtIGlzIGdvbmUg bm93LiBJZiB5b3UgbmVlZCBzb21lDQo+IGFkZGl0aW9uYWwgaGVscCwgZmVlbCBmcmVlIHRvIHJl cGx5IGJhY2suDQoNCkknbSBkaWdnaW5nIHRoaXMgdGhyZWFkIHVwIGJlY2F1c2UgSSdtIGV4cGVy aW1lbnRpbmcgYSBiaXQgbW9yZSB3aXRoDQpTRUxpbnV4LCB0aGlzIHRpbWUgd2l0aCBjb25maW5l ZCB1c2VycywgYW5kIEkgY2FtZSBiYWNrIHRvIHRoZSB0aHJlYWQNCndoaWxlIHRyeWluZyB0byBm aWd1cmUgc29tZSB0aGluZ3Mgb3V0Li4uDQoNCk9yaWdpbmFsbHkgSSB3YXMgdHJ5aW5nIHRvIHVz ZSBydW5jb24gdG8gcmVwcm9kdWNlIHRoZSBlbnZpcm9ubWVudCAoaW4NCnRlcm1zIG9mIHByb2Nl c3MgY29udGV4dCkgdGhhdCBjZXJtb25nZXIncyBwb3N0LXNhdmUgc2NyaXB0cyBydW4gaW4uIEl0 DQp0dXJuZWQgb3V0IHRoYXQgdGhpcyB3YXNuJ3QgZ29pbmcgdG8gd29yaywgYXMgWmRlbmVrIGV4 cGxhaW5lZDoNCg0KPiA+IE9uIFR1ZSwgMjAyMS0wNC0yNyBhdCAyMToxMSArMDIwMCwgWmRlbmVr IFB5dGVsYSB3cm90ZToNCj4gPiA+IHJ1bmNvbiBpcyBhIHVzZWZ1bCB0b29sLCBidXQgaXRzIHVz YWdlIGlzIGEgYml0IHRyaWNreTogaXQgY2FuIGJlDQo+ID4gPiB1c2VkIHRvIHJ1biBhIHByb2Nl c3MgaW4gYSBkaWZmZXJlbnQgY29udGV4dCwgYnV0IG9ubHkgaWYgcG9saWN5DQo+ID4gPiBhbGxv d3MgaXQuIE5hbWVseSwgaXQgdXNlcyBzZXRleGVjY29uKDMpIHRvIHNldCB0aGUgbmV3IHByb2Nl c3MNCj4gPiA+IGNvbnRleHQgYW5kIG9uIHRoZSB2ZXJ5IG5leHQgZXhlY3ZwKDIpIHRoZSBjb250 ZXh0IGlzIGNoZWNrZWQgYW5kIHRoZQ0KPiA+ID4gY2hhbmdlIGV2YWx1YXRlZC4NCj4gPiA+DQo+ ID4gPiBZb3UgYXJlIHJpZ2h0IHdpdGggeW91ciBjb21tYW5kcyBob3cgdG8gY2hlY2sgdGhlIDMg aW1wb3J0YW50IHBhcnRzDQo+ID4gPiB0byBhbGxvdyBhIHRyYW5zaXRpb24uIEhvd2V2ZXIsIGlu IHlvdXIgZmlyc3QgY29tbWFuZCwgeW91IHNlZSB0aGUNCj4gPiA+IHNoZWxsIGlzIHJ1bm5pbmcg aW4gdW5jb25maW5lZF90LiBJcyB0aGVyZSBhIHRyYW5zaXRpb24gYWxsb3dlZCB0bw0KPiA+ID4g Y2VydG1vbmdlcl90Pw0KPiA+ID4NCj4gPiA+ICMgc2VzZWFyY2ggLVQgLXMgdW5jb25maW5lZF90 IC1jIHByb2Nlc3MgfGdyZXAgY2VydG1vbmdlcl90DQo+ID4gPiA8Pg0KPiA+ID4NCj4gPiA+IE5v LiBZb3Ugd291bGQgYWN0dWFsbHkgbmVlZCBhIDMtbGluayBjaGFpbiAoY2VydG1vbmdlcl9pbml0 cmNfZXhlY190LA0KPiA+ID4gY2VydG1vbmdlcl9leGVjX3QsIGNlcnRtb25nZXJfdW5jb25maW5l ZF9leGVjX3QpLCBzbyBpdCdkIGJlDQo+ID4gPiB3b3J0aCB3cml0aW5nIGEgY3VzdG9tIHBvbGlj eSBpZiB5b3UgbmVlZCB0byBoYXZlIGl0IHdvcmtpbmcgZnJvbQ0KPiA+ID4gY29uc29sZS4NCg0K Rm9yIGNvbnRleHQsIEknbSBleHBlcmltZW50aW5nIHdpdGggdXNpbmcgdGhlIHRhcmdldGVkIHBv bGljeSdzDQpjb25maW5lZCB1c2Vycy4gTXkgdXNlciBpcyBtYXBwZWQgdG8gc3RhZmZfdSBhbmQg YXMgc3VjaCwgY2FuIFNTSCBpbiB0bw0KYSBtYWNoaW5lLCBidXQgY2FuJ3QgdXNlIHRoZSBzdSBj b21tYW5kIHRvIGJlY29tZSByb290LiBJZiBJIHdhbnQgdG8gZG8NCnN5c3RlbSBhZG1pbmlzdHJh dG9yIHN0dWZmLCBJIGhhdmUgdHdvIG9wdGlvbnM6DQoNCjEuIFJ1biAnbmV3cm9sZSAtciBzeXNh ZG1fcicgYW5kIHRoZW4gdXNlICdzdScgdG8gc3dpdGNoIHVzZXINCg0KMi4gVXNlICdzdWRvIC1y IHN5c2FkbV9yJyB3aGljaCB0cmFuc2l0aW9ucyBhbmQgc3dpdGNoZXMgdXNlciBpbiBhDQpzaW5n bGUgY29tbWFuZDsgc3VkbyBjYW4gYmUgY29uZmlndXJlZCB0byBwZXJmb3JtIHRoaXMgdHJhbnNp dGlvbiBieQ0KZGVmYXVsdCBieSBhZGRpbmcgUk9MRT1zeXNhZG1fciB0byB0aGUgc3Vkb2VycyBl bnRyeQ0KDQpTbyB3aGVyZSBkb2VzIHRoYXQgbGVhdmUgdGhlIHJ1bmNvbiBjb21tYW5kPyBXaGF0 IGlzIGl0IHR5cGljYWxseSB1c2VkDQpmb3I/DQoNCkkgYXNrIGJlY2F1c2UgYSBzaW1wbGUgInJ1 bmNvbiAtciBzeXNhZG1fciAtdCBzeXNhZG1fdCBpZCIgaW52b2NhdGlvbg0KZmFpbHMgd2l0aCAi cnVuY29uOiAnaWQnOiBQZXJtaXNzaW9uIGRlbmllZCIsIGFuZCB0aGUgZm9sbG93aW5nIEFWQw0K ZGVuaWFsOg0KDQphdmM6ICBkZW5pZWQgIHsgdHJhbnNpdGlvbiB9IGZvciAgcGlkPTE1OTk5NCBj b21tPSJydW5jb24iIHBhdGg9Ii91c3IvYmluL2lkIiBkZXY9ImRtLTAiIGlubz00MDY0NjE5IHNj b250ZXh0PXN0YWZmX3U6c3RhZmZfcjpzdGFmZl90OnMwIHRjb250ZXh0PXN0YWZmX3U6c3lzYWRt X3I6c3lzYWRtX3Q6czAgdGNsYXNzPXByb2Nlc3MgcGVybWlzc2l2ZT0wDQoNCkkgZ3Vlc3MgbmV3 cm9sZS9zdWRvIGRvIGFkZGl0aW9uYWwgc3R1ZmYgdGhhdCdzIG5lZWRlZCBpbiBvcmRlciB0bw0K dHJhbnNpdGlvbiBpbnRvIHRoZSB0YXJnZXQgcm9sZS4NCg0KSWYgcnVuY29uIGRvZXNuJ3QgZG8g dGhpcyBleHRyYSBzdHVmZiB0aGVuIHdoYXQncyB0aGUgcHJvcGVyIHB1cnBvc2Ugb2YNCnRoZSBj b21tYW5kIGFuZCBob3cgZG8gcGVvcGxlIHVzZSBpdD8NCg0KVGhhbmtzLA0KDQotLSANClNhbSBN b3JyaXMgPGh0dHBzOi8vcm9ib3RzLm9yZy51ay8+DQpDQUFBIEFBMUEgQ0E2OSBBODNBIDg5MkIg IDE4NTUgRDIwQiA0MjAyIDVDREEgMjdCOQotLQpfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXwpzZWxpbnV4IG1haWxpbmcgbGlzdCAtLSBzZWxpbnV4QGxpc3Rz LmZlZG9yYXByb2plY3Qub3JnClRvIHVuc3Vic2NyaWJlIHNlbmQgYW4gZW1haWwgdG8gc2VsaW51 eC1sZWF2ZUBsaXN0cy5mZWRvcmFwcm9qZWN0Lm9yZwpGZWRvcmEgQ29kZSBvZiBDb25kdWN0OiBo dHRwczovL2RvY3MuZmVkb3JhcHJvamVjdC5vcmcvZW4tVVMvcHJvamVjdC9jb2RlLW9mLWNvbmR1 Y3QvCkxpc3QgR3VpZGVsaW5lczogaHR0cHM6Ly9mZWRvcmFwcm9qZWN0Lm9yZy93aWtpL01haWxp bmdfbGlzdF9ndWlkZWxpbmVzCkxpc3QgQXJjaGl2ZXM6IGh0dHBzOi8vbGlzdHMuZmVkb3JhcHJv amVjdC5vcmcvYXJjaGl2ZXMvbGlzdC9zZWxpbnV4QGxpc3RzLmZlZG9yYXByb2plY3Qub3JnCkRv IG5vdCByZXBseSB0byBzcGFtLCByZXBvcnQgaXQ6IGh0dHBzOi8vcGFndXJlLmlvL2ZlZG9yYS1p bmZyYXN0cnVjdHVyZS9uZXdfaXNzdWUK