<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 02/23/12 14:59, Ade Lee wrote:
<blockquote cite="mid:1330037977.3757.23.camel@aleeredhat.laptop"
type="cite">
<pre wrap="">Please review.
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Pki-devel mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Pki-devel@redhat.com">Pki-devel@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/pki-devel">https://www.redhat.com/mailman/listinfo/pki-devel</a>
</pre>
</blockquote>
ACK<br>
<br>
* applied patch to freshly pulled repo (Dogtag 10)<br>
* built and installed new 'pki-core' components (specifically
'pki-selinux')<br>
* successfully restarted 'pki-ca' instance<br>
* successfully enrolled for a certificate<br>
* sudo audit2allow -R -i /var/log/audit/audit.log<br>
<br>
require {<br>
type pki_kra_t;<br>
type certwatch_t;<br>
type pki_ca_t;<br>
}<br>
<br>
#============= certwatch_t ==============<br>
files_read_var_files(certwatch_t)<br>
<br>
#============= pki_ca_t ==============<br>
fs_getattr_xattr_fs(pki_ca_t)<br>
<br>
#============= pki_kra_t ==============<br>
fs_getattr_xattr_fs(pki_kra_t)<br>
<br>
* sudo audit2allow -R -i /var/log/audit/audit.log | grep pki<br>
type pki_kra_t;<br>
type pki_ca_t;<br>
#============= pki_ca_t ==============<br>
fs_getattr_xattr_fs(pki_ca_t)<br>
#============= pki_kra_t ==============<br>
fs_getattr_xattr_fs(pki_kra_t)<br>
<br>
</body>
</html>