From: domg472@gmail.com (Dominick Grift)
To: refpolicy@oss.tresys.com
Subject: [refpolicy] [Backup 1/1] Clean up the Back up modules.
Date: Fri, 3 Sep 2010 17:50:57 +0200 [thread overview]
Message-ID: <20100903155055.GA27727@localhost.localdomain> (raw)
Signed-off-by: Dominick Grift <domg472@gmail.com>
---
:100644 100644 223b7f2... d924d71... M policy/modules/admin/backup.fc
:100644 100644 1017b7a... 44ee47c... M policy/modules/admin/backup.if
:100644 100644 0bfc958... e656c20... M policy/modules/admin/backup.te
policy/modules/admin/backup.fc | 13 +++----------
policy/modules/admin/backup.if | 8 +++++---
policy/modules/admin/backup.te | 1 -
3 files changed, 8 insertions(+), 14 deletions(-)
diff --git a/policy/modules/admin/backup.fc b/policy/modules/admin/backup.fc
index 223b7f2..d924d71 100644
--- a/policy/modules/admin/backup.fc
+++ b/policy/modules/admin/backup.fc
@@ -1,13 +1,6 @@
-# backup
-# label programs that do backups to other files on disk (IE a cron job that
-# calls tar) in backup_exec_t and label the directory for storing them as
-# backup_store_t, Debian uses /var/backups
+/usr/local/bin/backup-script -- gen_context(system_u:object_r:backup_exec_t,s0)
-#/usr/local/bin/backup-script -- gen_context(system_u:object_r:backup_exec_t,s0)
-
-ifdef(`distro_debian',`
-/etc/cron.daily/aptitude -- gen_context(system_u:object_r:backup_exec_t,s0)
-/etc/cron.daily/standard -- gen_context(system_u:object_r:backup_exec_t,s0)
-')
+/etc/cron\.daily/aptitude -- gen_context(system_u:object_r:backup_exec_t,s0)
+/etc/cron\.daily/standard -- gen_context(system_u:object_r:backup_exec_t,s0)
/var/backups(/.*)? gen_context(system_u:object_r:backup_store_t,s0)
diff --git a/policy/modules/admin/backup.if b/policy/modules/admin/backup.if
index 1017b7a..44ee47c 100644
--- a/policy/modules/admin/backup.if
+++ b/policy/modules/admin/backup.if
@@ -2,7 +2,8 @@
########################################
## <summary>
-## Execute backup in the backup domain.
+## Execute a domain transition to run
+## Backup.
## </summary>
## <param name="domain">
## <summary>
@@ -20,8 +21,9 @@ interface(`backup_domtrans',`
########################################
## <summary>
-## Execute backup in the backup domain, and
-## allow the specified role the backup domain.
+## Execute a domain transition to run
+## Backup, and allow the specified role
+## the Backup domain.
## </summary>
## <param name="domain">
## <summary>
diff --git a/policy/modules/admin/backup.te b/policy/modules/admin/backup.te
index 0bfc958..e656c20 100644
--- a/policy/modules/admin/backup.te
+++ b/policy/modules/admin/backup.te
@@ -51,7 +51,6 @@ corenet_sendrecv_all_client_packets(backup_t)
dev_getattr_all_blk_files(backup_t)
dev_getattr_all_chr_files(backup_t)
-# for SSP
dev_read_urand(backup_t)
domain_use_interactive_fds(backup_t)
--
1.7.2.1
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100903/c9e2dc89/attachment.bin
next reply other threads:[~2010-09-03 15:50 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-09-03 15:50 Dominick Grift [this message]
2010-09-09 12:29 ` [refpolicy] [Backup 1/1] Clean up the Back up modules Christopher J. PeBenito
2010-09-09 12:38 ` Dominick Grift
2010-09-09 14:54 ` Christopher J. PeBenito
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20100903155055.GA27727@localhost.localdomain \
--to=domg472@gmail.com \
--cc=refpolicy@oss.tresys.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.