selinux-refpolicy/testing/kerberos/denial_notes

10 lines
371 B
Plaintext

kerberos seems to have basic functionality. some denials occur but do not seem to effect what
was tested so far
/etc/init.d/krb5kdc start
allow krb5kdc_t krb5_conf_t:file write;
allow krb5kdc_t krb5kdc_conf_t:file write;
allow krb5kdc_t proc_net_t:dir read;
/etc/init.d/kadmin start
allow kadmind_t krb5_conf_t:file write;
allow kadmind_t krb5kdc_conf_t:file write;