Whitespace fixes in cgroup and init.
This commit is contained in:
parent
e2b9add5f8
commit
04dcd73fe3
@ -1,10 +1,10 @@
|
|||||||
/etc/cgconfig.conf -- gen_context(system_u:object_r:cgconfig_etc_t,s0)
|
/etc/cgconfig.conf -- gen_context(system_u:object_r:cgconfig_etc_t,s0)
|
||||||
/etc/cgrules.conf -- gen_context(system_u:object_r:cgrules_etc_t,s0)
|
/etc/cgrules.conf -- gen_context(system_u:object_r:cgrules_etc_t,s0)
|
||||||
|
|
||||||
/etc/rc\.d/init\.d/cgconfig -- gen_context(system_u:object_r:cgconfig_initrc_exec_t,s0)
|
/etc/rc\.d/init\.d/cgconfig -- gen_context(system_u:object_r:cgconfig_initrc_exec_t,s0)
|
||||||
/etc/rc\.d/init\.d/cgred -- gen_context(system_u:object_r:cgred_initrc_exec_t,s0)
|
/etc/rc\.d/init\.d/cgred -- gen_context(system_u:object_r:cgred_initrc_exec_t,s0)
|
||||||
|
|
||||||
/sbin/cgconfigparser -- gen_context(system_u:object_r:cgconfigparser_exec_t,s0)
|
/sbin/cgconfigparser -- gen_context(system_u:object_r:cgconfigparser_exec_t,s0)
|
||||||
/sbin/cgrulesengd -- gen_context(system_u:object_r:cgred_exec_t,s0)
|
/sbin/cgrulesengd -- gen_context(system_u:object_r:cgred_exec_t,s0)
|
||||||
|
|
||||||
/var/run/cgred.* gen_context(system_u:object_r:cgred_var_run_t,s0)
|
/var/run/cgred.* gen_context(system_u:object_r:cgred_var_run_t,s0)
|
||||||
|
@ -102,7 +102,7 @@ interface(`cgroup_stream_connect', `
|
|||||||
|
|
||||||
########################################
|
########################################
|
||||||
## <summary>
|
## <summary>
|
||||||
## All of the rules required to administrate
|
## All of the rules required to administrate
|
||||||
## an cgroup environment.
|
## an cgroup environment.
|
||||||
## </summary>
|
## </summary>
|
||||||
## <param name="domain">
|
## <param name="domain">
|
||||||
@ -121,7 +121,7 @@ interface(`cgroup_admin',`
|
|||||||
gen_require(`
|
gen_require(`
|
||||||
type cgred_t, cgconfigparser_t, cgred_var_run_t;
|
type cgred_t, cgconfigparser_t, cgred_var_run_t;
|
||||||
type cgconfig_etc_t, cgconfig_initrc_exec_t, cgred_initrc_exec_t;
|
type cgconfig_etc_t, cgconfig_initrc_exec_t, cgred_initrc_exec_t;
|
||||||
type cgred_etc_t, cgroup_t;
|
type cgred_etc_t, cgroup_t;
|
||||||
')
|
')
|
||||||
|
|
||||||
allow $1 cgconfigparser_t:process { ptrace signal_perms getattr };
|
allow $1 cgconfigparser_t:process { ptrace signal_perms getattr };
|
||||||
|
@ -56,7 +56,6 @@ files_getattr_all_files(cgred_t)
|
|||||||
files_getattr_all_sockets(cgred_t)
|
files_getattr_all_sockets(cgred_t)
|
||||||
files_read_all_symlinks(cgred_t)
|
files_read_all_symlinks(cgred_t)
|
||||||
files_search_all(cgred_t)
|
files_search_all(cgred_t)
|
||||||
|
|
||||||
files_read_etc_files(cgred_t)
|
files_read_etc_files(cgred_t)
|
||||||
|
|
||||||
fs_write_cgroup_files(cgred_t)
|
fs_write_cgroup_files(cgred_t)
|
||||||
|
@ -47,7 +47,7 @@ type init_var_run_t;
|
|||||||
files_pid_file(init_var_run_t)
|
files_pid_file(init_var_run_t)
|
||||||
|
|
||||||
#
|
#
|
||||||
# initctl_t is the type of the named pipe created
|
# initctl_t is the type of the named pipe created
|
||||||
# by init during initialization. This pipe is used
|
# by init during initialization. This pipe is used
|
||||||
# to communicate with init.
|
# to communicate with init.
|
||||||
#
|
#
|
||||||
@ -89,7 +89,7 @@ ifdef(`enable_mls',`
|
|||||||
|
|
||||||
# Use capabilities. old rule:
|
# Use capabilities. old rule:
|
||||||
allow init_t self:capability ~sys_module;
|
allow init_t self:capability ~sys_module;
|
||||||
# is ~sys_module really needed? observed:
|
# is ~sys_module really needed? observed:
|
||||||
# sys_boot
|
# sys_boot
|
||||||
# sys_tty_config
|
# sys_tty_config
|
||||||
# kill: now provided by domain_kill_all_domains()
|
# kill: now provided by domain_kill_all_domains()
|
||||||
@ -344,7 +344,7 @@ files_list_default(initrc_t)
|
|||||||
files_mounton_default(initrc_t)
|
files_mounton_default(initrc_t)
|
||||||
|
|
||||||
fs_delete_cgroup_dirs(initrc_t)
|
fs_delete_cgroup_dirs(initrc_t)
|
||||||
fs_list_cgroup_dirs(initrc_t)
|
fs_list_cgroup_dirs(initrc_t)
|
||||||
fs_rw_cgroup_files(initrc_t)
|
fs_rw_cgroup_files(initrc_t)
|
||||||
fs_list_inotifyfs(initrc_t)
|
fs_list_inotifyfs(initrc_t)
|
||||||
fs_register_binary_executable_type(initrc_t)
|
fs_register_binary_executable_type(initrc_t)
|
||||||
|
Loading…
Reference in New Issue
Block a user