diff --git a/policy/modules/services/ricci.te b/policy/modules/services/ricci.te index 695bbb57..acba016d 100644 --- a/policy/modules/services/ricci.te +++ b/policy/modules/services/ricci.te @@ -1,5 +1,5 @@ -policy_module(ricci,1.0.3) +policy_module(ricci,1.0.4) ######################################## # @@ -445,6 +445,7 @@ optional_policy(` # allow ricci_modstorage_t self:process { setsched signal }; +dontaudit ricci_modstorage_t self:process ptrace; allow ricci_modstorage_t self:capability { mknod sys_nice }; allow ricci_modstorage_t self:fifo_file rw_fifo_file_perms; allow ricci_modstorage_t self:unix_dgram_socket create_socket_perms; @@ -493,6 +494,10 @@ optional_policy(` ccs_read_config(ricci_modstorage_t) ') +optional_policy(` + lvm_domtrans(ricci_modstorage_t) +') + optional_policy(` nscd_socket_use(ricci_modstorage_t) ')