rpms/selinux-policy
5
0
Fork 0
Code Issues Pull Requests Releases Activity

memcached patch from Dan Walsh

Browse Source 
Moved term_dontaudits up for style
This commit is contained in:
Jeremy Solt 2010-04-01 10:49:29 -04:00 committed by Chris PeBenito
parent 60def66b13
commit 170a46d6c5
1 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
policy/modules/services/memcached.te
View File

@ -22,9 +22,12 @@ files_pid_file(memcached_var_run_t)
# #
allow memcached_t self:capability { setuid setgid }; allow memcached_t self:capability { setuid setgid };
dontaudit memcached_t self:capability sys_tty_config;
allow memcached_t self:process { fork setrlimit signal_perms };
allow memcached_t self:tcp_socket create_stream_socket_perms; allow memcached_t self:tcp_socket create_stream_socket_perms;
allow memcached_t self:udp_socket { create_socket_perms listen }; allow memcached_t self:udp_socket { create_socket_perms listen };
allow memcached_t self:fifo_file rw_fifo_file_perms; allow memcached_t self:fifo_file rw_fifo_file_perms;
allow memcached_t self:unix_stream_socket create_stream_socket_perms;
corenet_all_recvfrom_unlabeled(memcached_t) corenet_all_recvfrom_unlabeled(memcached_t)
corenet_udp_sendrecv_generic_if(memcached_t) corenet_udp_sendrecv_generic_if(memcached_t)
@ -42,10 +45,15 @@ manage_dirs_pattern(memcached_t, memcached_var_run_t, memcached_var_run_t)
manage_files_pattern(memcached_t, memcached_var_run_t, memcached_var_run_t) manage_files_pattern(memcached_t, memcached_var_run_t, memcached_var_run_t)
files_pid_filetrans(memcached_t, memcached_var_run_t, { file dir }) files_pid_filetrans(memcached_t, memcached_var_run_t, { file dir })
kernel_read_kernel_sysctls(memcached_t)
kernel_read_system_state(memcached_t) kernel_read_system_state(memcached_t)
files_read_etc_files(memcached_t) files_read_etc_files(memcached_t)
miscfiles_read_localization(memcached_t) term_dontaudit_use_all_ptys(memcached_t)
term_dontaudit_use_all_ttys(memcached_t)
term_dontaudit_use_console(memcached_t)
sysnet_dns_name_resolve(memcached_t) auth_use_nsswitch(memcached_t)
miscfiles_read_localization(memcached_t)