From: Russell Coker <rcoker@redhat.com>
To: SE Linux <selinux@tycho.nsa.gov>
Cc: Stephen Smalley <sds@epoch.ncsc.mil>
Subject: a trivial patch
Date: Mon, 2 Aug 2004 22:34:23 +1000 [thread overview]
Message-ID: <200408022234.23408.rcoker@redhat.com> (raw)
[-- Attachment #1: Type: text/plain, Size: 106 bytes --]
Steve, please check this in the CVS.
--
http://apac.redhat.com/disclaimer
See above URL for disclaimer.
[-- Attachment #2: diff --]
[-- Type: text/x-diff, Size: 1523 bytes --]
diff -ru /usr/src/se/policy/domains/program/dmesg.te ./domains/program/dmesg.te
--- /usr/src/se/policy/domains/program/dmesg.te 2004-07-12 23:37:25.000000000 +1000
+++ ./domains/program/dmesg.te 2004-07-27 17:03:42.000000000 +1000
@@ -23,3 +23,6 @@
allow dmesg_t sysadm_tty_device_t:chr_file { ioctl };
allow dmesg_t var_log_t:file { getattr write };
read_locale(dmesg_t)
+
+# for when /usr is not mounted
+dontaudit dmesg_t file_t:dir search;
diff -ru /usr/src/se/policy/domains/program/hostname.te ./domains/program/hostname.te
--- /usr/src/se/policy/domains/program/hostname.te 2004-05-12 05:10:33.000000000 +1000
+++ ./domains/program/hostname.te 2004-07-27 17:05:00.000000000 +1000
@@ -19,3 +19,6 @@
allow hostname_t self:unix_stream_socket create_stream_socket_perms;
dontaudit hostname_t var_t:dir search;
allow hostname_t fs_t:filesystem getattr;
+
+# for when /usr is not mounted
+dontaudit hostname_t file_t:dir search;
diff -ru /usr/src/se/policy/domains/program/unused/amavis.te ./domains/program/unused/amavis.te
--- /usr/src/se/policy/domains/program/unused/amavis.te 2004-03-18 15:36:08.000000000 +1100
+++ ./domains/program/unused/amavis.te 2004-07-21 19:08:13.000000000 +1000
@@ -18,6 +18,7 @@
allow initrc_t amavisd_lib_t:dir { search read write rmdir remove_name unlink };
allow initrc_t amavisd_lib_t:file unlink;
+allow initrc_t amavisd_var_run_t:dir setattr;
allow amavisd_t self:capability { chown dac_override setgid setuid };
allow amavisd_t usr_t:{ file lnk_file } { getattr read };
reply other threads:[~2004-08-02 12:34 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200408022234.23408.rcoker@redhat.com \
--to=rcoker@redhat.com \
--cc=sds@epoch.ncsc.mil \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.