rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Allow pads_admin to search parent directories to be able to interact with pads content.

Browse Source 
Allow plymouthd_admin to search parent directories to be able to interact with plymouthd content.

Allow postgresql admin to search parent directories to be able to manage postgresql content.

Allow prelude_admin to search parent directories to be able to manage prelude content.

Signed-off-by: Dominick Grift <domg472@gmail.com>
This commit is contained in:
Dominick Grift 2010-09-15 13:05:32 +02:00
parent d183137edb
commit 1215dfb87c
4 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
policy/modules/services/pads.if
View File

@ -39,6 +39,9 @@ interface(`pads_admin', `
role_transition $2 pads_initrc_exec_t system_r;
allow $2 system_r;
files_search_pids($1)
admin_pattern($1, pads_var_run_t)
files_search_etc($1)
admin_pattern($1, pads_config_t)
')

2
policy/modules/services/plymouthd.if
View File

@ -252,9 +252,11 @@ interface(`plymouthd_admin', `
allow $1 plymouthd_t:process { ptrace signal_perms getattr };
read_files_pattern($1, plymouthd_t, plymouthd_t)
files_search_var_lib($1)
admin_pattern($1, plymouthd_spool_t)
admin_pattern($1, plymouthd_var_lib_t)
files_search_pids($1)
admin_pattern($1, plymouthd_var_run_t)
')

3
policy/modules/services/postgresql.if
View File

@ -441,10 +441,13 @@ interface(`postgresql_admin',`
admin_pattern($1, postgresql_var_run_t)
files_search_var_lib($1)
admin_pattern($1, postgresql_db_t)
files_search_etc($1)
admin_pattern($1, postgresql_etc_t)
logging_search_logs($1)
admin_pattern($1, postgresql_log_t)
admin_pattern($1, postgresql_tmp_t)

7
policy/modules/services/prelude.if
View File

@ -136,9 +136,16 @@ interface(`prelude_admin',`
allow $2 system_r;
admin_pattern($1, prelude_spool_t)
files_search_var_lib($1)
admin_pattern($1, prelude_var_lib_t)
files_search_pids($1)
admin_pattern($1, prelude_var_run_t)
admin_pattern($1, prelude_audisp_var_run_t)
files_search_tmp($1)
admin_pattern($1, prelude_lml_tmp_t)
admin_pattern($1, prelude_lml_var_run_t)
')