From 1b11a1fe6507c7ba6719baf7f9513d77ab7cbee3 Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Tue, 20 Jun 2006 17:32:21 +0000 Subject: [PATCH] need send_msg for merging dbus --- refpolicy/policy/modules/admin/portage.if | 5 +++++ refpolicy/policy/modules/admin/portage.te | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/refpolicy/policy/modules/admin/portage.if b/refpolicy/policy/modules/admin/portage.if index 8debda6e..39407bcd 100644 --- a/refpolicy/policy/modules/admin/portage.if +++ b/refpolicy/policy/modules/admin/portage.if @@ -92,6 +92,10 @@ interface(`portage_run',` # interface(`portage_compile_domain',` + gen_require(` + class dbus send_msg; + ') + allow $1 self:capability { fowner fsetid mknod setgid setuid chown dac_override net_raw }; dontaudit $1 self:capability sys_chroot; allow $1 self:process { setpgid setsched setrlimit signal_perms execmem }; @@ -114,6 +118,7 @@ interface(`portage_compile_domain',` allow $1 self:udp_socket recvfrom; # needed for merging dbus: allow $1 self:netlink_selinux_socket { bind create read }; + allow $1 self:dbus send_msg; allow $1 portage_devpts_t:chr_file { rw_file_perms setattr }; term_create_pty($1,portage_devpts_t) diff --git a/refpolicy/policy/modules/admin/portage.te b/refpolicy/policy/modules/admin/portage.te index eff39511..00351d15 100644 --- a/refpolicy/policy/modules/admin/portage.te +++ b/refpolicy/policy/modules/admin/portage.te @@ -1,5 +1,5 @@ -policy_module(portage,1.0.3) +policy_module(portage,1.0.4) ######################################## #