* [refpolicy] [PATCH 1/1] Allow rngd to write a pid file
@ 2013-10-21 18:33 Sven Vermeulen
2013-11-03 15:58 ` Dominick Grift
0 siblings, 1 reply; 2+ messages in thread
From: Sven Vermeulen @ 2013-10-21 18:33 UTC (permalink / raw)
To: refpolicy
Signed-off-by: Luis Ressel <aranea@aixah.de>
Acked-by: Sven Vermeulen <sven.vermeulen@siphos.be>
---
rngd.te | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/rngd.te b/rngd.te
index 4ab4eb5..19b66b9 100644
--- a/rngd.te
+++ b/rngd.te
@@ -12,6 +12,9 @@ init_daemon_domain(rngd_t, rngd_exec_t)
type rngd_initrc_exec_t;
init_script_file(rngd_initrc_exec_t)
+type rngd_var_run_t;
+files_pid_file(rngd_var_run_t)
+
########################################
#
# Local policy
@@ -22,6 +25,9 @@ allow rngd_t self:process signal;
allow rngd_t self:fifo_file rw_fifo_file_perms;
allow rngd_t self:unix_stream_socket { accept listen };
+manage_files_pattern(rngd_t, rngd_var_run_t, rngd_var_run_t)
+files_pid_filetrans(rngd_t, rngd_var_run_t, file)
+
kernel_rw_kernel_sysctl(rngd_t)
dev_read_rand(rngd_t)
--
1.8.1.5
^ permalink raw reply related [flat|nested] 2+ messages in thread
* [refpolicy] [PATCH 1/1] Allow rngd to write a pid file
2013-10-21 18:33 [refpolicy] [PATCH 1/1] Allow rngd to write a pid file Sven Vermeulen
@ 2013-11-03 15:58 ` Dominick Grift
0 siblings, 0 replies; 2+ messages in thread
From: Dominick Grift @ 2013-11-03 15:58 UTC (permalink / raw)
To: refpolicy
On Mon, 2013-10-21 at 20:33 +0200, Sven Vermeulen wrote:
> Signed-off-by: Luis Ressel <aranea@aixah.de>
> Acked-by: Sven Vermeulen <sven.vermeulen@siphos.be>
This seems to be lacking a file context spec?
> ---
> rngd.te | 6 ++++++
> 1 file changed, 6 insertions(+)
>
> diff --git a/rngd.te b/rngd.te
> index 4ab4eb5..19b66b9 100644
> --- a/rngd.te
> +++ b/rngd.te
> @@ -12,6 +12,9 @@ init_daemon_domain(rngd_t, rngd_exec_t)
> type rngd_initrc_exec_t;
> init_script_file(rngd_initrc_exec_t)
>
> +type rngd_var_run_t;
> +files_pid_file(rngd_var_run_t)
> +
> ########################################
> #
> # Local policy
> @@ -22,6 +25,9 @@ allow rngd_t self:process signal;
> allow rngd_t self:fifo_file rw_fifo_file_perms;
> allow rngd_t self:unix_stream_socket { accept listen };
>
> +manage_files_pattern(rngd_t, rngd_var_run_t, rngd_var_run_t)
> +files_pid_filetrans(rngd_t, rngd_var_run_t, file)
> +
> kernel_rw_kernel_sysctl(rngd_t)
>
> dev_read_rand(rngd_t)
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2013-11-03 15:58 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-10-21 18:33 [refpolicy] [PATCH 1/1] Allow rngd to write a pid file Sven Vermeulen
2013-11-03 15:58 ` Dominick Grift
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.