From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ricardo Wurmus Subject: Re: [PATCH] Add SELinux policy for guix-daemon. Date: Fri, 16 Feb 2018 17:00:39 +0100 Message-ID: <871shk7wm0.fsf@elephly.net> References: <87zi4fiqzk.fsf@mdc-berlin.de> <87k1ve2w0o.fsf@gmail.com> <87inay6zgt.fsf@elephly.net> <87inaxl6hc.fsf@gmail.com> Mime-Version: 1.0 Content-Type: text/plain Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:42630) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1emiRg-00045I-Gg for guix-devel@gnu.org; Fri, 16 Feb 2018 11:01:14 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1emiRY-0002Y4-JG for guix-devel@gnu.org; Fri, 16 Feb 2018 11:01:08 -0500 Received: from sender-of-o51.zoho.com ([135.84.80.216]:21048) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1emiRY-0002Uj-BU for guix-devel@gnu.org; Fri, 16 Feb 2018 11:01:00 -0500 In-reply-to: <87inaxl6hc.fsf@gmail.com> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Alex Vong Cc: guix-devel , Ricardo Wurmus Alex Vong writes: >> These are not things that the daemon needs to have access to. These are >> paths that are to be labeled. The daemon is executed in a certain >> context, and processes in that context may have certain permissions on >> some of the files that have been labeled. >> > I will have to read the colour book when I have time to understand what > do you mean! You might find this more informative: http://lists.gnu.org/archive/html/guix-devel/2018-01/msg00433.html -- Ricardo GPG: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC https://elephly.net