--- /root/public_html/policy/nsa/file_contexts/program/ntpd.fc 2004-06-25 23:02:43.000000000 +0300
+++ /etc/security/selinux/src/policy/file_contexts/program/ntpd.fc 2004-10-05 10:20:01.034334096 +0300
@@ -10,3 +10,11 @@
/var/run/ntpd.pid -- system_u:object_r:ntpd_var_run_t
/etc/cron\.(daily|weekly)/ntp-simple -- system_u:object_r:ntpd_exec_t
/etc/cron\.(daily|weekly)/ntp-server -- system_u:object_r:ntpd_exec_t
+
+ifdef(`distro_gentoo', `
+/usr/bin/ntpd -- system_u:object_r:ntpd_exec_t
+/usr/bin/ntpdate -- system_u:object_r:ntpd_exec_t
+
+# for net-misc/openntpd
+/etc/ntpd\.conf -- system_u:object_r:net_conf_t
+')
--- /root/public_html/policy/nsa/domains/program/unused/ntpd.te 2004-10-02 01:38:20.000000000 +0300
+++ /etc/security/selinux/src/policy/domains/program/ntpd.te 2004-10-05 04:23:53.935260872 +0300
@@ -69,3 +69,8 @@
ifdef(`firstboot.te', `
dontaudit ntpd_t firstboot_t:fd { use };
')
+
+ifdef(`distro_gentoo', `
+allow ntpd_t self:capability { sys_chroot kill };
+')
+