Add new ksm domain.
Dominick Grift
domg472 at gmail.com
Tue Nov 24 11:27:36 UTC 2009
On 11/21/2009 02:42 PM, Dominick Grift wrote:
> Attached is ksm module. If virtualization is installed then ksm and
> ksmtuned services are enabled by default.
>
> Currently they run in initrc_t. It seems the initrc_t domain has
> sufficient permissions for ksm tune daemon.
>
> The policy is not thoroughly tested yet and so i left ksmtuned_t permissive.
Anther patch:
allow ksmtuned_t self:capability sys_tty_config;
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 261 bytes
Desc: OpenPGP digital signature
Url : http://lists.fedoraproject.org/pipermail/selinux/attachments/20091124/ce9a4bdd/attachment.bin
More information about the selinux
mailing list