* Simple patch to policy to allow interfaces
@ 2007-01-23 14:49 Daniel J Walsh
0 siblings, 0 replies; only message in thread
From: Daniel J Walsh @ 2007-01-23 14:49 UTC (permalink / raw)
To: Christopher J. PeBenito, SE Linux
[-- Attachment #1: Type: text/plain, Size: 1 bytes --]
[-- Attachment #2: newdiff --]
[-- Type: text/plain, Size: 3693 bytes --]
--- nsaserefpolicy/policy/modules/apps/ethereal.if 2007-01-02 12:57:22.000000000 -0500
+++ serefpolicy-2.5.1/policy/modules/apps/ethereal.if 2007-01-23 09:18:28.000000000 -0500
@@ -34,6 +34,10 @@
#
template(`ethereal_per_role_template',`
+ gen_require(`
+ type ethereal_exec_t;
+ ')
+
##############################
#
# Declarations
--- nsaserefpolicy/policy/modules/apps/games.if 2007-01-02 12:57:22.000000000 -0500
+++ serefpolicy-2.5.1/policy/modules/apps/games.if 2007-01-23 09:19:04.000000000 -0500
@@ -33,6 +33,10 @@
## </param>
#
template(`games_per_role_template',`
+ gen_require(`
+ type games_exec_t;
+ type games_data_t;
+ ')
########################################
#
--- nsaserefpolicy/policy/modules/apps/mplayer.if 2007-01-02 12:57:22.000000000 -0500
+++ serefpolicy-2.5.1/policy/modules/apps/mplayer.if 2007-01-23 09:18:45.000000000 -0500
@@ -33,6 +33,10 @@
## </param>
#
template(`mplayer_per_role_template',`
+ gen_require(`
+ type mencoder_exec_t;
+ type mplayer_exec_t;
+ ')
########################################
#
--- nsaserefpolicy/policy/modules/apps/tvtime.if 2007-01-02 12:57:22.000000000 -0500
+++ serefpolicy-2.5.1/policy/modules/apps/tvtime.if 2007-01-23 09:18:33.000000000 -0500
@@ -33,6 +33,9 @@
## </param>
#
template(`tvtime_per_role_template',`
+ gen_require(`
+ type tvtime_exec_t;
+ ')
########################################
#
--- nsaserefpolicy/policy/modules/apps/uml.if 2007-01-02 12:57:22.000000000 -0500
+++ serefpolicy-2.5.1/policy/modules/apps/uml.if 2007-01-23 09:18:55.000000000 -0500
@@ -34,6 +34,11 @@
#
template(`uml_per_role_template',`
+ gen_require(`
+ type uml_ro_t;
+ type uml_exec_t;
+ ')
+
########################################
#
# Declarations
--- nsaserefpolicy/policy/modules/apps/vmware.if 2007-01-02 12:57:22.000000000 -0500
+++ serefpolicy-2.5.1/policy/modules/apps/vmware.if 2007-01-23 09:19:00.000000000 -0500
@@ -33,6 +33,10 @@
## </param>
#
template(`vmware_per_role_template',`
+ gen_require(`
+ type vmware_exec_t;
+ type vmware_sys_conf_t;
+ ')
##############################
#
--- nsaserefpolicy/policy/modules/services/ftp.if 2007-01-02 12:57:43.000000000 -0500
+++ serefpolicy-2.5.1/policy/modules/services/ftp.if 2007-01-23 09:19:24.000000000 -0500
@@ -24,6 +24,10 @@
## </param>
#
template(`ftp_per_role_template',`
+ gen_require(`
+ type ftpd_t;
+ ')
+
tunable_policy(`ftpd_is_daemon',`
userdom_manage_user_home_content_files($1,ftpd_t)
userdom_manage_user_home_content_symlinks($1,ftpd_t)
--- nsaserefpolicy/policy/modules/services/razor.if 2007-01-02 12:57:43.000000000 -0500
+++ serefpolicy-2.5.1/policy/modules/services/razor.if 2007-01-23 09:19:30.000000000 -0500
@@ -23,6 +23,12 @@
## </param>
#
template(`razor_common_domain_template',`
+ gen_require(`
+ type razor_exec_t;
+ type razor_etc_t;
+ type razor_log_t;
+ type razor_var_lib_t;
+ ')
allow $1_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap };
allow $1_t self:fd use;
@@ -131,6 +137,9 @@
## </param>
#
template(`razor_per_role_template',`
+ gen_require(`
+ type razor_exec_t;
+ ')
type $1_razor_t;
domain_type($1_razor_t)
--- nsaserefpolicy/policy/modules/services/spamassassin.if 2007-01-02 12:57:43.000000000 -0500
+++ serefpolicy-2.5.1/policy/modules/services/spamassassin.if 2007-01-23 09:19:34.000000000 -0500
@@ -35,6 +35,12 @@
# toggled on activation of spamc, and similarly for spamd.
template(`spamassassin_per_role_template',`
+ gen_require(`
+ type spamc_exec_t;
+ type spamassassin_exec_t;
+ type spamd_t, spamd_tmp_t;
+ ')
+
##############################
#
# Declarations
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2007-01-23 14:49 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2007-01-23 14:49 Simple patch to policy to allow interfaces Daniel J Walsh
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.