Re: [yocto] [meta-selinux][PATCH 0/1] refpolicy: Allow ping to get/set capabilities

2014-01-28 Thread Pascal Ouyang
于 14-1-28 下午3:54, wenzong@windriver.com 写道: From: Wenzong Fan wenzong@windriver.com When ping is installed with capabilities instead of being marked setuid, then the ping_t domain needs to be allowed to getcap/setcap. This patch was backported from upstream. The following

[yocto] [meta-selinux][PATCH 0/1] refpolicy: Allow ping to get/set capabilities

2014-01-27 Thread wenzong.fan
From: Wenzong Fan wenzong@windriver.com When ping is installed with capabilities instead of being marked setuid, then the ping_t domain needs to be allowed to getcap/setcap. This patch was backported from upstream. The following changes since commit 271955d346f305b196f069d9dc46db16c43678de: