* ccs uses tmp files.
@ 2007-03-23 20:05 Daniel J Walsh
2007-04-10 13:06 ` Christopher J. PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Daniel J Walsh @ 2007-03-23 20:05 UTC (permalink / raw)
To: Christopher J. PeBenito, SE Linux
[-- Attachment #1: Type: text/plain, Size: 1 bytes --]
[-- Attachment #2: ccs.patch --]
[-- Type: text/x-patch, Size: 883 bytes --]
--- nsaserefpolicy/policy/modules/services/ccs.te 2007-03-20 23:38:06.000000000 -0400
+++ serefpolicy-2.5.10/policy/modules/services/ccs.te 2007-03-22 15:06:59.000000000 -0400
@@ -10,10 +10,14 @@
type ccs_exec_t;
init_daemon_domain(ccs_t, ccs_exec_t)
-# pid files
+# conf files
type cluster_conf_t;
files_type(cluster_conf_t)
+# tmp files
+type ccs_tmp_t;
+files_tmp_file(ccs_tmp_t)
+
# log files
type ccs_var_log_t;
logging_log_file(ccs_var_log_t)
@@ -45,6 +49,12 @@
manage_files_pattern(ccs_t,cluster_conf_t,cluster_conf_t)
+# tmp file
+allow ccs_t ccs_tmp_t:dir manage_dir_perms;
+manage_dirs_pattern(ccs_t,ccs_tmp_t,ccs_tmp_t)
+manage_files_pattern(ccs_t,ccs_tmp_t,ccs_tmp_t)
+files_tmp_filetrans(ccs_t, ccs_tmp_t, { file dir })
+
# log files
manage_files_pattern(ccs_t,ccs_var_log_t,ccs_var_log_t)
manage_sock_files_pattern(ccs_t,ccs_var_log_t,ccs_var_log_t)
^ permalink raw reply [flat|nested] 2+ messages in thread* Re: ccs uses tmp files.
2007-03-23 20:05 ccs uses tmp files Daniel J Walsh
@ 2007-04-10 13:06 ` Christopher J. PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2007-04-10 13:06 UTC (permalink / raw)
To: Daniel J Walsh; +Cc: SE Linux
On Fri, 2007-03-23 at 16:05 -0400, Daniel J Walsh wrote:
> --- nsaserefpolicy/policy/modules/services/ccs.te 2007-03-20 23:38:06.000000000 -0400
> +++ serefpolicy-2.5.10/policy/modules/services/ccs.te 2007-03-22 15:06:59.000000000 -0400
> @@ -10,10 +10,14 @@
> type ccs_exec_t;
> init_daemon_domain(ccs_t, ccs_exec_t)
>
> -# pid files
> +# conf files
> type cluster_conf_t;
> files_type(cluster_conf_t)
>
> +# tmp files
> +type ccs_tmp_t;
> +files_tmp_file(ccs_tmp_t)
> +
> # log files
> type ccs_var_log_t;
> logging_log_file(ccs_var_log_t)
> @@ -45,6 +49,12 @@
>
> manage_files_pattern(ccs_t,cluster_conf_t,cluster_conf_t)
>
> +# tmp file
> +allow ccs_t ccs_tmp_t:dir manage_dir_perms;
> +manage_dirs_pattern(ccs_t,ccs_tmp_t,ccs_tmp_t)
> +manage_files_pattern(ccs_t,ccs_tmp_t,ccs_tmp_t)
> +files_tmp_filetrans(ccs_t, ccs_tmp_t, { file dir })
> +
> # log files
> manage_files_pattern(ccs_t,ccs_var_log_t,ccs_var_log_t)
> manage_sock_files_pattern(ccs_t,ccs_var_log_t,ccs_var_log_t)
Merged.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2007-04-10 13:06 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2007-03-23 20:05 ccs uses tmp files Daniel J Walsh
2007-04-10 13:06 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.