* [refpolicy] [PATCH 23/34]: patch to add needed permissions to the authlogin module
@ 2011-02-16 6:27 Guido Trentalancia
2011-02-28 14:23 ` Christopher J. PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Guido Trentalancia @ 2011-02-16 6:27 UTC (permalink / raw)
To: refpolicy
This patch adds some needed permissions to the chkpwd_t domain
in policy/modules/system/authlogin.te.
--- refpolicy-git-15022011/policy/modules/system/authlogin.te 2011-01-08 19:07:21.347757938 +0100
+++ refpolicy-git-15022011-new-modified/policy/modules/system/authlogin.te 2011-02-15 22:30:53.148753919 +0100
@@ -83,11 +83,13 @@ logging_log_file(wtmp_t)
allow chkpwd_t self:capability { dac_override setuid };
dontaudit chkpwd_t self:capability sys_tty_config;
-allow chkpwd_t self:process getattr;
+allow chkpwd_t self:process { getattr signal };
allow chkpwd_t shadow_t:file read_file_perms;
files_list_etc(chkpwd_t)
+kernel_read_crypto_sysctls(chkpwd_t)
+
# is_selinux_enabled
kernel_read_system_state(chkpwd_t)
^ permalink raw reply [flat|nested] 2+ messages in thread* [refpolicy] [PATCH 23/34]: patch to add needed permissions to the authlogin module
2011-02-16 6:27 [refpolicy] [PATCH 23/34]: patch to add needed permissions to the authlogin module Guido Trentalancia
@ 2011-02-28 14:23 ` Christopher J. PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2011-02-28 14:23 UTC (permalink / raw)
To: refpolicy
On 02/16/11 01:27, Guido Trentalancia wrote:
> This patch adds some needed permissions to the chkpwd_t domain
> in policy/modules/system/authlogin.te.
>
> --- refpolicy-git-15022011/policy/modules/system/authlogin.te 2011-01-08 19:07:21.347757938 +0100
> +++ refpolicy-git-15022011-new-modified/policy/modules/system/authlogin.te 2011-02-15 22:30:53.148753919 +0100
> @@ -83,11 +83,13 @@ logging_log_file(wtmp_t)
>
> allow chkpwd_t self:capability { dac_override setuid };
> dontaudit chkpwd_t self:capability sys_tty_config;
> -allow chkpwd_t self:process getattr;
> +allow chkpwd_t self:process { getattr signal };
>
> allow chkpwd_t shadow_t:file read_file_perms;
> files_list_etc(chkpwd_t)
>
> +kernel_read_crypto_sysctls(chkpwd_t)
> +
> # is_selinux_enabled
> kernel_read_system_state(chkpwd_t)
Merged.
--
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2011-02-28 14:23 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2011-02-16 6:27 [refpolicy] [PATCH 23/34]: patch to add needed permissions to the authlogin module Guido Trentalancia
2011-02-28 14:23 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.