[refpolicy] [PATCH] rpcbind needs to read sysfs

[refpolicy] [PATCH] rpcbind needs to read sysfs

[Russell Coker]

Tiny patch for rpcbind to read sysfs.


diff -ruN /home/rjc/src/pol-git/policy/modules/contrib/rpcbind.te ./policy/modules/contrib/rpcbind.te
--- /home/rjc/src/pol-git/policy/modules/contrib/rpcbind.te	2016-07-30 08:14:41.145651133 +1000
+++ ./policy/modules/contrib/rpcbind.te	2016-07-31 19:26:02.416587318 +1000
@@ -39,6 +39,9 @@
 manage_sock_files_pattern(rpcbind_t, rpcbind_var_lib_t, rpcbind_var_lib_t)
 files_var_lib_filetrans(rpcbind_t, rpcbind_var_lib_t, { file dir sock_file })
 
+# for /sys/devices/system/cpu/online
+dev_read_sysfs(rpcbind_t)
+
 kernel_read_system_state(rpcbind_t)
 kernel_read_network_state(rpcbind_t)
 kernel_request_load_module(rpcbind_t)

[refpolicy] [PATCH] rpcbind needs to read sysfs

[Jason Zaman]

On Sun, Jul 31, 2016 at 07:27:09PM +1000, Russell Coker wrote:
> Tiny patch for rpcbind to read sysfs.
> 
> 
> diff -ruN /home/rjc/src/pol-git/policy/modules/contrib/rpcbind.te ./policy/modules/contrib/rpcbind.te
> --- /home/rjc/src/pol-git/policy/modules/contrib/rpcbind.te	2016-07-30 08:14:41.145651133 +1000
> +++ ./policy/modules/contrib/rpcbind.te	2016-07-31 19:26:02.416587318 +1000
> @@ -39,6 +39,9 @@
>  manage_sock_files_pattern(rpcbind_t, rpcbind_var_lib_t, rpcbind_var_lib_t)
>  files_var_lib_filetrans(rpcbind_t, rpcbind_var_lib_t, { file dir sock_file })
>  
> +# for /sys/devices/system/cpu/online
> +dev_read_sysfs(rpcbind_t)
We have this interface now instead: dev_read_cpu_online()
that file is labelled cpu_online_t now.
> +
>  kernel_read_system_state(rpcbind_t)
>  kernel_read_network_state(rpcbind_t)
>  kernel_request_load_module(rpcbind_t)
> _______________________________________________
> refpolicy mailing list
> refpolicy at oss.tresys.com
> http://oss.tresys.com/mailman/listinfo/refpolicy

[refpolicy] [PATCH] rpcbind needs to read sysfs

[Russell Coker]

On Mon, 1 Aug 2016 12:24:30 AM Jason Zaman wrote:
> > +# for /sys/devices/system/cpu/online
> > +dev_read_sysfs(rpcbind_t)
> 
> We have this interface now instead: dev_read_cpu_online()
> that file is labelled cpu_online_t now.

Thanks for that, I've attached an updated patch.

-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: diff
Type: text/x-patch
Size: 597 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20160801/63de19b5/attachment.bin 

[refpolicy] [PATCH] rpcbind needs to read sysfs

[Chris PeBenito]

On 07/31/16 11:06, Russell Coker wrote:
> On Mon, 1 Aug 2016 12:24:30 AM Jason Zaman wrote:
>>> +# for /sys/devices/system/cpu/online
>>> +dev_read_sysfs(rpcbind_t)
>>
>> We have this interface now instead: dev_read_cpu_online()
>> that file is labelled cpu_online_t now.
>
> Thanks for that, I've attached an updated patch.

Merged.

-- 
Chris PeBenito