From: Daniel J Walsh <dwalsh@redhat.com>
To: "Christopher J. PeBenito" <cpebenito@tresys.com>,
SE Linux <selinux@tycho.nsa.gov>
Subject: Simple patch to policy to allow interfaces
Date: Tue, 23 Jan 2007 09:49:23 -0500 [thread overview]
Message-ID: <45B62073.5040405@redhat.com> (raw)
[-- Attachment #1: Type: text/plain, Size: 1 bytes --]
[-- Attachment #2: newdiff --]
[-- Type: text/plain, Size: 3693 bytes --]
--- nsaserefpolicy/policy/modules/apps/ethereal.if 2007-01-02 12:57:22.000000000 -0500
+++ serefpolicy-2.5.1/policy/modules/apps/ethereal.if 2007-01-23 09:18:28.000000000 -0500
@@ -34,6 +34,10 @@
#
template(`ethereal_per_role_template',`
+ gen_require(`
+ type ethereal_exec_t;
+ ')
+
##############################
#
# Declarations
--- nsaserefpolicy/policy/modules/apps/games.if 2007-01-02 12:57:22.000000000 -0500
+++ serefpolicy-2.5.1/policy/modules/apps/games.if 2007-01-23 09:19:04.000000000 -0500
@@ -33,6 +33,10 @@
## </param>
#
template(`games_per_role_template',`
+ gen_require(`
+ type games_exec_t;
+ type games_data_t;
+ ')
########################################
#
--- nsaserefpolicy/policy/modules/apps/mplayer.if 2007-01-02 12:57:22.000000000 -0500
+++ serefpolicy-2.5.1/policy/modules/apps/mplayer.if 2007-01-23 09:18:45.000000000 -0500
@@ -33,6 +33,10 @@
## </param>
#
template(`mplayer_per_role_template',`
+ gen_require(`
+ type mencoder_exec_t;
+ type mplayer_exec_t;
+ ')
########################################
#
--- nsaserefpolicy/policy/modules/apps/tvtime.if 2007-01-02 12:57:22.000000000 -0500
+++ serefpolicy-2.5.1/policy/modules/apps/tvtime.if 2007-01-23 09:18:33.000000000 -0500
@@ -33,6 +33,9 @@
## </param>
#
template(`tvtime_per_role_template',`
+ gen_require(`
+ type tvtime_exec_t;
+ ')
########################################
#
--- nsaserefpolicy/policy/modules/apps/uml.if 2007-01-02 12:57:22.000000000 -0500
+++ serefpolicy-2.5.1/policy/modules/apps/uml.if 2007-01-23 09:18:55.000000000 -0500
@@ -34,6 +34,11 @@
#
template(`uml_per_role_template',`
+ gen_require(`
+ type uml_ro_t;
+ type uml_exec_t;
+ ')
+
########################################
#
# Declarations
--- nsaserefpolicy/policy/modules/apps/vmware.if 2007-01-02 12:57:22.000000000 -0500
+++ serefpolicy-2.5.1/policy/modules/apps/vmware.if 2007-01-23 09:19:00.000000000 -0500
@@ -33,6 +33,10 @@
## </param>
#
template(`vmware_per_role_template',`
+ gen_require(`
+ type vmware_exec_t;
+ type vmware_sys_conf_t;
+ ')
##############################
#
--- nsaserefpolicy/policy/modules/services/ftp.if 2007-01-02 12:57:43.000000000 -0500
+++ serefpolicy-2.5.1/policy/modules/services/ftp.if 2007-01-23 09:19:24.000000000 -0500
@@ -24,6 +24,10 @@
## </param>
#
template(`ftp_per_role_template',`
+ gen_require(`
+ type ftpd_t;
+ ')
+
tunable_policy(`ftpd_is_daemon',`
userdom_manage_user_home_content_files($1,ftpd_t)
userdom_manage_user_home_content_symlinks($1,ftpd_t)
--- nsaserefpolicy/policy/modules/services/razor.if 2007-01-02 12:57:43.000000000 -0500
+++ serefpolicy-2.5.1/policy/modules/services/razor.if 2007-01-23 09:19:30.000000000 -0500
@@ -23,6 +23,12 @@
## </param>
#
template(`razor_common_domain_template',`
+ gen_require(`
+ type razor_exec_t;
+ type razor_etc_t;
+ type razor_log_t;
+ type razor_var_lib_t;
+ ')
allow $1_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap };
allow $1_t self:fd use;
@@ -131,6 +137,9 @@
## </param>
#
template(`razor_per_role_template',`
+ gen_require(`
+ type razor_exec_t;
+ ')
type $1_razor_t;
domain_type($1_razor_t)
--- nsaserefpolicy/policy/modules/services/spamassassin.if 2007-01-02 12:57:43.000000000 -0500
+++ serefpolicy-2.5.1/policy/modules/services/spamassassin.if 2007-01-23 09:19:34.000000000 -0500
@@ -35,6 +35,12 @@
# toggled on activation of spamc, and similarly for spamd.
template(`spamassassin_per_role_template',`
+ gen_require(`
+ type spamc_exec_t;
+ type spamassassin_exec_t;
+ type spamd_t, spamd_tmp_t;
+ ')
+
##############################
#
# Declarations
reply other threads:[~2007-01-23 14:49 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=45B62073.5040405@redhat.com \
--to=dwalsh@redhat.com \
--cc=cpebenito@tresys.com \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.