diff -ru /usr/src/se/policy/domains/program/unused/rpcd.te ./domains/program/unused/rpcd.te --- /usr/src/se/policy/domains/program/unused/rpcd.te 2004-07-11 17:37:11.000000000 +1000 +++ ./domains/program/unused/rpcd.te 2004-07-11 17:04:51.000000000 +1000 @@ -23,6 +23,8 @@ allow $1_t var_lib_nfs_t:file create_file_perms; ') +type exports_t, file_type, sysadmfile; + # rpcd_t is the domain of rpc daemons. # rpcd_exec_t is the type of rpc daemon programs. # @@ -51,6 +53,8 @@ ifdef(`rpm.te', ` allow rpcd_t self:capability { chown dac_override setgid setuid }; +# for /etc/rc.d/init.d/nfs to create /etc/exports +allow initrc_t exports_t:file rw_file_perms; ') allow rpcd_t self:file { getattr read }; diff -ru /usr/src/se/policy/file_contexts/program/rpcd.fc ./file_contexts/program/rpcd.fc --- /usr/src/se/policy/file_contexts/program/rpcd.fc 2004-01-24 12:15:53.000000000 +1100 +++ ./file_contexts/program/rpcd.fc 2004-07-11 17:05:33.000000000 +1000 @@ -6,3 +6,4 @@ /usr/sbin/rpc\.mountd -- system_u:object_r:nfsd_exec_t /var/run/rpc.statd.pid -- system_u:object_r:rpcd_var_run_t /var/run/rpc.statd(/.*)? system_u:object_r:rpcd_var_run_t +/etc/exports -- system_u:object_r:exports_t