rpms/selinux-policy
6
0
Fork 0
Code Issues Pull Requests Releases Activity

Fix cobbler_admin interface to require cobblerd_initrc_exec_t.

Browse Source 
As per: http://oss.tresys.com/pipermail/refpolicy/2010-March/002258.html

Signed-off-by: Dominick Grift <domg472@gmail.com>
Signed-off-by: Chris PeBenito <cpebenito@tresys.com>
This commit is contained in:
Dominick Grift 2010-03-04 19:52:02 +01:00 committed by Chris PeBenito
parent eeb7616f5e
commit 183f79e38e
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/services/cobbler.if
View File

@ -161,7 +161,7 @@ interface(`cobbler_manage_lib_files',`
interface(`cobblerd_admin',` interface(`cobblerd_admin',`
gen_require(` gen_require(`
type cobblerd_t, cobbler_var_lib_t, cobbler_var_log_t; type cobblerd_t, cobbler_var_lib_t, cobbler_var_log_t;
type cobbler_etc_t; type cobbler_etc_t, cobblerd_initrc_exec_t;
') ')
allow $1 cobblerd_t:process { ptrace signal_perms getattr }; allow $1 cobblerd_t:process { ptrace signal_perms getattr };