rpms/selinux-policy
6
0
Fork 0
Code Issues Pull Requests Releases Activity

module build fixes

Browse Source
This commit is contained in:
Chris PeBenito 2005-10-25 01:17:55 +00:00
parent 9dd50026a0
commit 28e730b8e2
3 changed files with 16 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
refpolicy/policy/modules/services/portmap.te
View File

@ -202,3 +202,12 @@ optional_policy(`mount.te',`
optional_policy(`nis.te',` optional_policy(`nis.te',`
nis_use_ypbind(portmap_helper_t) nis_use_ypbind(portmap_helper_t)
') ')
# temporary:
gen_require(`
type rpcd_t, nfsd_t;
')
# rpcd_t needs to talk to the portmap_t domain
portmap_udp_sendrecv(rpcd_t)
portmap_tcp_connect(nfsd_t)
portmap_udp_sendrecv(nfsd_t)

5
refpolicy/policy/modules/services/rpc.te
View File

@ -58,8 +58,6 @@ term_use_controlling_term(rpcd_t)
seutil_dontaudit_search_config(rpcd_t) seutil_dontaudit_search_config(rpcd_t)
# rpcd_t needs to talk to the portmap_t domain
portmap_udp_sendrecv(rpcd_t)
ifdef(`distro_redhat', ` ifdef(`distro_redhat', `
allow rpcd_t self:capability { chown dac_override setgid setuid }; allow rpcd_t self:capability { chown dac_override setgid setuid };
@ -93,9 +91,6 @@ files_search_pids(nfsd_t)
# for exportfs and rpc.mountd # for exportfs and rpc.mountd
files_getattr_tmp_dir(nfsd_t) files_getattr_tmp_dir(nfsd_t)
portmap_tcp_connect(nfsd_t)
portmap_udp_sendrecv(nfsd_t)
tunable_policy(`nfs_export_all_rw',` tunable_policy(`nfs_export_all_rw',`
auth_read_all_dirs_except_shadow(nfsd_t) auth_read_all_dirs_except_shadow(nfsd_t)
fs_read_noxattr_fs_files(nfsd_t) fs_read_noxattr_fs_files(nfsd_t)

7
refpolicy/policy/modules/services/samba.te
View File

@ -314,9 +314,16 @@ optional_policy(`rhgb.te',`
') dnl end TODO ') dnl end TODO
ifdef(`hide_broken_symptoms', ` ifdef(`hide_broken_symptoms', `
gen_require(`
type boot_t, default_t, tmpfs_t;
')
dontaudit smbd_t { devpts_t boot_t default_t tmpfs_t }:dir getattr; dontaudit smbd_t { devpts_t boot_t default_t tmpfs_t }:dir getattr;
dontaudit smbd_t devpts_t:dir getattr; dontaudit smbd_t devpts_t:dir getattr;
') ')
gen_require(`
type mtrr_device_t;
')
allow smbd_t mtrr_device_t:file getattr; allow smbd_t mtrr_device_t:file getattr;
######################################## ########################################