Re: [Pacemaker] [RFC] working selinux policy module for pacemaker

2013-02-22 Thread Andrew Beekhof
On Fri, Feb 22, 2013 at 8:39 PM, Vladislav Bogdanov wrote: > 22.02.2013 10:45, Andrew Beekhof wrote: >> On Fri, Feb 22, 2013 at 4:55 PM, Vladislav Bogdanov >> wrote: >>> 04.01.2013 13:56, Andrew Beekhof wrote: On Fri, Jan 4, 2013 at 4:27 PM, Vladislav Bogdanov wrote: > 04.01.2013

Re: [Pacemaker] [RFC] working selinux policy module for pacemaker

2013-02-22 Thread Vladislav Bogdanov
22.02.2013 10:45, Andrew Beekhof wrote: > On Fri, Feb 22, 2013 at 4:55 PM, Vladislav Bogdanov > wrote: >> 04.01.2013 13:56, Andrew Beekhof wrote: >>> On Fri, Jan 4, 2013 at 4:27 PM, Vladislav Bogdanov >>> wrote: 04.01.2013 06:07, Andrew Beekhof wrote: > On Wed, Dec 19, 2012 at 7:33 PM,

Re: [Pacemaker] [RFC] working selinux policy module for pacemaker

2013-02-21 Thread Andrew Beekhof
On Fri, Feb 22, 2013 at 4:55 PM, Vladislav Bogdanov wrote: > 04.01.2013 13:56, Andrew Beekhof wrote: >> On Fri, Jan 4, 2013 at 4:27 PM, Vladislav Bogdanov >> wrote: >>> 04.01.2013 06:07, Andrew Beekhof wrote: On Wed, Dec 19, 2012 at 7:33 PM, Vladislav Bogdanov wrote: > Hi all, >>>

Re: [Pacemaker] [RFC] working selinux policy module for pacemaker

2013-02-21 Thread Vladislav Bogdanov
04.01.2013 13:56, Andrew Beekhof wrote: > On Fri, Jan 4, 2013 at 4:27 PM, Vladislav Bogdanov > wrote: >> 04.01.2013 06:07, Andrew Beekhof wrote: >>> On Wed, Dec 19, 2012 at 7:33 PM, Vladislav Bogdanov >>> wrote: Hi all, I'd like to share my successful attempt to confine pacemaker.

Re: [Pacemaker] [RFC] working selinux policy module for pacemaker

2013-01-04 Thread Andrew Beekhof
On Fri, Jan 4, 2013 at 4:27 PM, Vladislav Bogdanov wrote: > 04.01.2013 06:07, Andrew Beekhof wrote: >> On Wed, Dec 19, 2012 at 7:33 PM, Vladislav Bogdanov >> wrote: >>> Hi all, >>> >>> I'd like to share my successful attempt to confine pacemaker. >>> >>> I took pacemaker module barebone found in

Re: [Pacemaker] [RFC] working selinux policy module for pacemaker

2013-01-03 Thread Vladislav Bogdanov
04.01.2013 06:07, Andrew Beekhof wrote: > On Wed, Dec 19, 2012 at 7:33 PM, Vladislav Bogdanov > wrote: >> Hi all, >> >> I'd like to share my successful attempt to confine pacemaker. >> >> I took pacemaker module barebone found in latest fedora's selinux-policy >> (3.11.1-64.fc18) and >> extended

Re: [Pacemaker] [RFC] working selinux policy module for pacemaker

2013-01-03 Thread Andrew Beekhof
On Wed, Dec 19, 2012 at 7:33 PM, Vladislav Bogdanov wrote: > Hi all, > > I'd like to share my successful attempt to confine pacemaker. > > I took pacemaker module barebone found in latest fedora's selinux-policy > (3.11.1-64.fc18) and > extended it a bit, so now I have pacemaker and some pacemake

[Pacemaker] [RFC] working selinux policy module for pacemaker

2012-12-19 Thread Vladislav Bogdanov
Hi all, I'd like to share my successful attempt to confine pacemaker. I took pacemaker module barebone found in latest fedora's selinux-policy (3.11.1-64.fc18) and extended it a bit, so now I have pacemaker and some pacemaker-managed services running confined. Everything runs on EL6 with corosy