All of lore.kernel.org
 help / color / mirror / Atom feed
* [refpolicy] pty creation type
@ 2008-11-13 17:57 Martin Orr
  2008-11-13 18:53 ` Christopher J. PeBenito
  0 siblings, 1 reply; 2+ messages in thread
From: Martin Orr @ 2008-11-13 17:57 UTC (permalink / raw)
  To: refpolicy

All my ptys are now created as devpts_t.  I think this got lost in the ubac
conversion.

Index: policy/modules/system/userdomain.if
===================================================================
--- policy/modules/system/userdomain.if.orig
+++ policy/modules/system/userdomain.if
@@ -57,6 +57,7 @@
 	dontaudit $1_t self:socket create;

 	allow $1_t user_devpts_t:chr_file { setattr rw_chr_file_perms };
+	term_create_pty($1_t, user_devpts_t)
 	# avoid annoying messages on terminal hangup on role change
 	dontaudit $1_t user_devpts_t:chr_file ioctl;


-- 
Martin Orr

^ permalink raw reply	[flat|nested] 2+ messages in thread

* [refpolicy] pty creation type
  2008-11-13 17:57 [refpolicy] pty creation type Martin Orr
@ 2008-11-13 18:53 ` Christopher J. PeBenito
  0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2008-11-13 18:53 UTC (permalink / raw)
  To: refpolicy

On Thu, 2008-11-13 at 17:57 +0000, Martin Orr wrote:
> All my ptys are now created as devpts_t.  I think this got lost in the ubac
> conversion.

Merged.

> Index: policy/modules/system/userdomain.if
> ===================================================================
> --- policy/modules/system/userdomain.if.orig
> +++ policy/modules/system/userdomain.if
> @@ -57,6 +57,7 @@
>  	dontaudit $1_t self:socket create;
> 
>  	allow $1_t user_devpts_t:chr_file { setattr rw_chr_file_perms };
> +	term_create_pty($1_t, user_devpts_t)
>  	# avoid annoying messages on terminal hangup on role change
>  	dontaudit $1_t user_devpts_t:chr_file ioctl;
> 

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2008-11-13 18:53 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2008-11-13 17:57 [refpolicy] pty creation type Martin Orr
2008-11-13 18:53 ` Christopher J. PeBenito

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.