* [refpolicy] [PATCH 17/20] init: create init_use_inherited_script_ptys() for tmpreaper (Debian)
@ 2013-09-24 13:40 Dominick Grift
2013-09-26 14:31 ` Christopher J. PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Dominick Grift @ 2013-09-24 13:40 UTC (permalink / raw)
To: refpolicy
Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
---
policy/modules/system/init.if | 21 +++++++++++++++++++++
1 file changed, 21 insertions(+)
diff --git a/policy/modules/system/init.if b/policy/modules/system/init.if
index 24e7804..79a45f6 100644
--- a/policy/modules/system/init.if
+++ b/policy/modules/system/init.if
@@ -1488,6 +1488,27 @@ interface(`init_use_script_ptys',`
########################################
## <summary>
+## Read and write inherited init script ptys.
+## </summary>
+## <param name="domain">
+## <summary>
+## Domain allowed access.
+## </summary>
+## </param>
+#
+interface(`init_use_inherited_script_ptys',`
+ gen_require(`
+ type initrc_devpts_t;
+ ')
+
+ term_list_ptys($1)
+ allow $1 initrc_devpts_t:chr_file { getattr read write ioctl };
+
+ init_use_fds($1)
+')
+
+########################################
+## <summary>
## Do not audit attempts to read and
## write the init script pty.
## </summary>
--
1.8.3.1
^ permalink raw reply related [flat|nested] 2+ messages in thread
* [refpolicy] [PATCH 17/20] init: create init_use_inherited_script_ptys() for tmpreaper (Debian)
2013-09-24 13:40 [refpolicy] [PATCH 17/20] init: create init_use_inherited_script_ptys() for tmpreaper (Debian) Dominick Grift
@ 2013-09-26 14:31 ` Christopher J. PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2013-09-26 14:31 UTC (permalink / raw)
To: refpolicy
On Tue 24 Sep 2013 09:40:19 AM EDT, Dominick Grift wrote:
> Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
> ---
> policy/modules/system/init.if | 21 +++++++++++++++++++++
> 1 file changed, 21 insertions(+)
>
> diff --git a/policy/modules/system/init.if b/policy/modules/system/init.if
> index 24e7804..79a45f6 100644
> --- a/policy/modules/system/init.if
> +++ b/policy/modules/system/init.if
> @@ -1488,6 +1488,27 @@ interface(`init_use_script_ptys',`
>
> ########################################
> ## <summary>
> +## Read and write inherited init script ptys.
> +## </summary>
> +## <param name="domain">
> +## <summary>
> +## Domain allowed access.
> +## </summary>
> +## </param>
> +#
> +interface(`init_use_inherited_script_ptys',`
> + gen_require(`
> + type initrc_devpts_t;
> + ')
> +
> + term_list_ptys($1)
> + allow $1 initrc_devpts_t:chr_file { getattr read write ioctl };
> +
> + init_use_fds($1)
> +')
> +
> +########################################
> +## <summary>
> ## Do not audit attempts to read and
> ## write the init script pty.
> ## </summary>
Merged.
--
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2013-09-26 14:31 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-09-24 13:40 [refpolicy] [PATCH 17/20] init: create init_use_inherited_script_ptys() for tmpreaper (Debian) Dominick Grift
2013-09-26 14:31 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.