diff -aru policy.old/domains/program/hald.te policy/domains/program/hald.te --- policy.old/domains/program/hald.te 2005-04-06 17:23:59.000000000 -0400 +++ policy/domains/program/hald.te 2005-04-06 17:30:22.000000000 -0400 @@ -29,8 +29,11 @@ allow hald_t { bin_t sbin_t }:dir search; allow hald_t self:fifo_file rw_file_perms; allow hald_t usr_t:file { getattr read }; - allow hald_t bin_t:file getattr; + +# For backwards compatibility with older kernels +allow hald_t self:netlink_socket create_socket_perms; + allow hald_t self:netlink_kobject_uevent_socket create_socket_perms; allow hald_t self:netlink_route_socket r_netlink_socket_perms; allow hald_t self:capability { net_admin sys_admin dac_override dac_read_search mknod }; @@ -77,17 +80,14 @@ allow hald_t mnt_t:dir search; r_dir_file(hald_t, proc_net_t) - -# For /usr/libxexc/hald-addon-acpi - writes to /var/run/acpid.socket +# For /usr/libexec/hald-addon-acpi - writes to /var/run/acpid.socket ifdef(`apmd.te', ` allow hald_t apmd_var_run_t:sock_file write; allow hald_t apmd_t:unix_stream_socket connectto; ') -# For /usr/sbin/dmidecode -# Violates assertion -#allow hald_t memory_device_t:chr_file read; -allow hald_t self:capability sys_rawio; +# For /usr/libexec/hald-probe-smbios +domain_auto_trans(hald_t, dmidecode_exec_t, dmidecode_t) # ?? ifdef(`lvm.te', `