* [refpolicy] dbus, inotify
@ 2008-09-25 12:45 Martin Orr
2008-11-06 15:06 ` Christopher J. PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Martin Orr @ 2008-09-25 12:45 UTC (permalink / raw)
To: refpolicy
Let *_dbusd_t list inotifyfs.
Aug 20 12:23:52 caligula kernel: type=1400 audit(1219231432.671:4): avc:
denied { read } for pid=2646 comm="dbus-daemon" path="inotify"
dev=inotifyfs ino=1 scontext=system_u:system_r:system_dbusd_t:s0
tcontext=system_u:object_r:inotifyfs_t:s0 tclass=dir
Index: policy/modules/services/dbus.if
===================================================================
--- policy/modules/services/dbus.if.orig
+++ policy/modules/services/dbus.if
@@ -139,6 +139,7 @@
fs_getattr_romfs($1_dbusd_t)
fs_getattr_xattr_fs($1_dbusd_t)
+ fs_list_inotifyfs($1_dbusd_t)
selinux_get_fs_mount($1_dbusd_t)
selinux_validate_context($1_dbusd_t)
--
Martin Orr
^ permalink raw reply [flat|nested] 2+ messages in thread* [refpolicy] dbus, inotify
2008-09-25 12:45 [refpolicy] dbus, inotify Martin Orr
@ 2008-11-06 15:06 ` Christopher J. PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2008-11-06 15:06 UTC (permalink / raw)
To: refpolicy
On Thu, 2008-09-25 at 13:45 +0100, Martin Orr wrote:
> Let *_dbusd_t list inotifyfs.
>
> Aug 20 12:23:52 caligula kernel: type=1400 audit(1219231432.671:4): avc:
> denied { read } for pid=2646 comm="dbus-daemon" path="inotify"
> dev=inotifyfs ino=1 scontext=system_u:system_r:system_dbusd_t:s0
> tcontext=system_u:object_r:inotifyfs_t:s0 tclass=dir
Merged.
> Index: policy/modules/services/dbus.if
> ===================================================================
> --- policy/modules/services/dbus.if.orig
> +++ policy/modules/services/dbus.if
> @@ -139,6 +139,7 @@
>
> fs_getattr_romfs($1_dbusd_t)
> fs_getattr_xattr_fs($1_dbusd_t)
> + fs_list_inotifyfs($1_dbusd_t)
>
> selinux_get_fs_mount($1_dbusd_t)
> selinux_validate_context($1_dbusd_t)
>
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2008-11-06 15:06 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2008-09-25 12:45 [refpolicy] dbus, inotify Martin Orr
2008-11-06 15:06 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.