* Missing gen_requires for building additional user types in modules
@ 2006-11-28 20:22 Daniel J Walsh
2006-11-29 13:41 ` Christopher J. PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Daniel J Walsh @ 2006-11-28 20:22 UTC (permalink / raw)
To: Christopher J. PeBenito, SE Linux
[-- Attachment #1: Type: text/plain, Size: 1 bytes --]
[-- Attachment #2: diff --]
[-- Type: text/plain, Size: 2320 bytes --]
--- ./apps/mozilla.if~ 2006-11-27 17:27:46.000000000 -0500
+++ ./apps/mozilla.if 2006-11-28 14:45:07.000000000 -0500
@@ -33,7 +33,11 @@
## </param>
#
template(`mozilla_per_role_template',`
-
+ gen_require(`
+ type mozilla_exec_t;
+ type mozilla_conf_t;
+ ')
+
########################################
#
# Declarations
--- ./apps/loadkeys.if~ 2006-11-27 17:27:46.000000000 -0500
+++ ./apps/loadkeys.if 2006-11-28 15:10:28.000000000 -0500
@@ -50,18 +50,13 @@
## <rolecap/>
#
interface(`loadkeys_run',`
- ifdef(`targeted_policy',`
- # $0(): disabled in targeted policy as there
- # is no loadkeys domain.
- ',`
- gen_require(`
- type loadkeys_t;
- ')
-
- loadkeys_domtrans($1)
- role $2 types loadkeys_t;
- allow loadkeys_t $3:chr_file rw_term_perms;
+ gen_require(`
+ type loadkeys_t;
')
+
+ loadkeys_domtrans($1)
+ role $2 types loadkeys_t;
+ allow loadkeys_t $3:chr_file rw_term_perms;
')
########################################
--- ./services/xserver.if~ 2006-11-27 17:27:46.000000000 -0500
+++ ./services/xserver.if 2006-11-28 15:19:10.000000000 -0500
@@ -13,6 +13,9 @@
## </param>
#
template(`xserver_common_domain_template',`
+ gen_require(`
+ type xserver_exec_t, xkb_var_lib_t, xserver_log_t;
+ ')
##############################
#
@@ -222,6 +225,11 @@
#
template(`xserver_per_role_template',`
+ gen_require(`
+ type iceauth_exec_t, xauth_exec_t;
+ attribute fonts_type, fonts_cache_type, fonts_config_type;
+ ')
+
##############################
#
# Declarations
--- ./system/userdomain.if~ 2006-11-27 17:27:46.000000000 -0500
+++ ./system/userdomain.if 2006-11-28 15:10:48.000000000 -0500
@@ -654,6 +654,9 @@
## </param>
#
template(`userdom_common_user_template',`
+ gen_require(`
+ attribute unpriv_userdomain;
+ ')
userdom_base_user_template($1)
@@ -916,6 +919,11 @@
## </param>
#
template(`userdom_unpriv_user_template', `
+
+ gen_require(`
+ attribute user_ptynode, user_home_dir_type, user_home_type, user_tmpfile, user_ttynode, privhome;
+ ')
+
##############################
#
# Declarations
@@ -1051,7 +1059,7 @@
template(`userdom_admin_user_template',`
gen_require(`
class passwd { passwd chfn chsh rootok crontab };
- attribute admin_terminal;
+ attribute admin_terminal, privhome;
')
##############################
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Missing gen_requires for building additional user types in modules
2006-11-28 20:22 Missing gen_requires for building additional user types in modules Daniel J Walsh
@ 2006-11-29 13:41 ` Christopher J. PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2006-11-29 13:41 UTC (permalink / raw)
To: Daniel J Walsh; +Cc: SE Linux
Merged except for the loadkeys change.
On Tue, 2006-11-28 at 15:22 -0500, Daniel J Walsh wrote:
> plain text document attachment (diff)
> --- ./apps/mozilla.if~ 2006-11-27 17:27:46.000000000 -0500
> +++ ./apps/mozilla.if 2006-11-28 14:45:07.000000000 -0500
> @@ -33,7 +33,11 @@
> ## </param>
> #
> template(`mozilla_per_role_template',`
> -
> + gen_require(`
> + type mozilla_exec_t;
> + type mozilla_conf_t;
> + ')
> +
> ########################################
> #
> # Declarations
> --- ./apps/loadkeys.if~ 2006-11-27 17:27:46.000000000 -0500
> +++ ./apps/loadkeys.if 2006-11-28 15:10:28.000000000 -0500
> @@ -50,18 +50,13 @@
> ## <rolecap/>
> #
> interface(`loadkeys_run',`
> - ifdef(`targeted_policy',`
> - # $0(): disabled in targeted policy as there
> - # is no loadkeys domain.
> - ',`
> - gen_require(`
> - type loadkeys_t;
> - ')
> -
> - loadkeys_domtrans($1)
> - role $2 types loadkeys_t;
> - allow loadkeys_t $3:chr_file rw_term_perms;
> + gen_require(`
> + type loadkeys_t;
> ')
> +
> + loadkeys_domtrans($1)
> + role $2 types loadkeys_t;
> + allow loadkeys_t $3:chr_file rw_term_perms;
> ')
>
> ########################################
> --- ./services/xserver.if~ 2006-11-27 17:27:46.000000000 -0500
> +++ ./services/xserver.if 2006-11-28 15:19:10.000000000 -0500
> @@ -13,6 +13,9 @@
> ## </param>
> #
> template(`xserver_common_domain_template',`
> + gen_require(`
> + type xserver_exec_t, xkb_var_lib_t, xserver_log_t;
> + ')
>
> ##############################
> #
> @@ -222,6 +225,11 @@
> #
> template(`xserver_per_role_template',`
>
> + gen_require(`
> + type iceauth_exec_t, xauth_exec_t;
> + attribute fonts_type, fonts_cache_type, fonts_config_type;
> + ')
> +
> ##############################
> #
> # Declarations
> --- ./system/userdomain.if~ 2006-11-27 17:27:46.000000000 -0500
> +++ ./system/userdomain.if 2006-11-28 15:10:48.000000000 -0500
> @@ -654,6 +654,9 @@
> ## </param>
> #
> template(`userdom_common_user_template',`
> + gen_require(`
> + attribute unpriv_userdomain;
> + ')
>
> userdom_base_user_template($1)
>
> @@ -916,6 +919,11 @@
> ## </param>
> #
> template(`userdom_unpriv_user_template', `
> +
> + gen_require(`
> + attribute user_ptynode, user_home_dir_type, user_home_type, user_tmpfile, user_ttynode, privhome;
> + ')
> +
> ##############################
> #
> # Declarations
> @@ -1051,7 +1059,7 @@
> template(`userdom_admin_user_template',`
> gen_require(`
> class passwd { passwd chfn chsh rootok crontab };
> - attribute admin_terminal;
> + attribute admin_terminal, privhome;
> ')
>
> ##############################
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2006-11-29 13:41 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-11-28 20:22 Missing gen_requires for building additional user types in modules Daniel J Walsh
2006-11-29 13:41 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.