SE-DBUS bug fix

Havoc Pennington hp at redhat.com
Thu Jul 29 11:47:45 PDT 2004


On Thu, 2004-07-29 at 12:54, Matthew Rickard wrote:
> The current AVC log callback in the SE-DBUS patch is broken and can
> cause some very strange logging behavior.  Patch to fix this is
> attached.

Thanks!

> Also, if desired we could start a thread to monitor for netlink events
> from the kernel signaling enforcing mode and policy reload changes. 
> Currently in the single-threaded mode the AVC will check for new
> messages at the start of each permission check (more info on this is in
> the avc_init man page).  If this is something we want to do let me know
> and I'll send the patch.

What are the tradeoffs? (e.g. does the thread make permission checks
faster, or ... ?)

Havoc




More information about the dbus mailing list