--- /root/public_html/policy/nsa/file_contexts/program/ntpd.fc 2004-06-25 23:02:43.000000000 +0300 +++ /etc/security/selinux/src/policy/file_contexts/program/ntpd.fc 2004-10-05 10:20:01.034334096 +0300 @@ -10,3 +10,11 @@ /var/run/ntpd.pid -- system_u:object_r:ntpd_var_run_t /etc/cron\.(daily|weekly)/ntp-simple -- system_u:object_r:ntpd_exec_t /etc/cron\.(daily|weekly)/ntp-server -- system_u:object_r:ntpd_exec_t + +ifdef(`distro_gentoo', ` +/usr/bin/ntpd -- system_u:object_r:ntpd_exec_t +/usr/bin/ntpdate -- system_u:object_r:ntpd_exec_t + +# for net-misc/openntpd +/etc/ntpd\.conf -- system_u:object_r:net_conf_t +') --- /root/public_html/policy/nsa/domains/program/unused/ntpd.te 2004-10-02 01:38:20.000000000 +0300 +++ /etc/security/selinux/src/policy/domains/program/ntpd.te 2004-10-05 04:23:53.935260872 +0300 @@ -69,3 +69,8 @@ ifdef(`firstboot.te', ` dontaudit ntpd_t firstboot_t:fd { use }; ') + +ifdef(`distro_gentoo', ` +allow ntpd_t self:capability { sys_chroot kill }; +') +