rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Handle unix_chkpwd usage by useradd and groupadd; fixes ticket #49.

Browse Source
This commit is contained in:
Chris PeBenito 2009-08-05 14:19:54 -04:00
parent e335910197
commit 02e594d5dc
2 changed files with 13 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
Changelog
View File

@ -1,3 +1,4 @@
- Handle unix_chkpwd usage by useradd and groupadd.
- Add missing compatibility aliases for xdm_xserver*_t types. - Add missing compatibility aliases for xdm_xserver*_t types.
* Thu Jul 30 2009 Chris PeBenito <selinux@tresys.com> - 2.20090730 * Thu Jul 30 2009 Chris PeBenito <selinux@tresys.com> - 2.20090730

18
policy/modules/admin/usermanage.te
View File

@ -1,5 +1,5 @@
policy_module(usermanage, 1.13.0) policy_module(usermanage, 1.13.1)
######################################## ########################################
# #
@ -218,11 +218,14 @@ logging_send_syslog_msg(groupadd_t)
miscfiles_read_localization(groupadd_t) miscfiles_read_localization(groupadd_t)
auth_domtrans_chk_passwd(groupadd_t)
auth_rw_lastlog(groupadd_t)
auth_use_nsswitch(groupadd_t)
# these may be unnecessary due to the above
# domtrans_chk_passwd() call.
auth_manage_shadow(groupadd_t) auth_manage_shadow(groupadd_t)
auth_relabel_shadow(groupadd_t) auth_relabel_shadow(groupadd_t)
auth_etc_filetrans_shadow(groupadd_t) auth_etc_filetrans_shadow(groupadd_t)
auth_rw_lastlog(groupadd_t)
auth_use_nsswitch(groupadd_t)
seutil_read_config(groupadd_t) seutil_read_config(groupadd_t)
@ -465,12 +468,15 @@ selinux_compute_user_contexts(useradd_t)
term_use_all_user_ttys(useradd_t) term_use_all_user_ttys(useradd_t)
term_use_all_user_ptys(useradd_t) term_use_all_user_ptys(useradd_t)
auth_manage_shadow(useradd_t) auth_domtrans_chk_passwd(useradd_t)
auth_relabel_shadow(useradd_t)
auth_etc_filetrans_shadow(useradd_t)
auth_rw_lastlog(useradd_t) auth_rw_lastlog(useradd_t)
auth_rw_faillog(useradd_t) auth_rw_faillog(useradd_t)
auth_use_nsswitch(useradd_t) auth_use_nsswitch(useradd_t)
# these may be unnecessary due to the above
# domtrans_chk_passwd() call.
auth_manage_shadow(useradd_t)
auth_relabel_shadow(useradd_t)
auth_etc_filetrans_shadow(useradd_t)
init_use_fds(useradd_t) init_use_fds(useradd_t)
init_rw_utmp(useradd_t) init_rw_utmp(useradd_t)