- Allow lvm to dbus chat with hal

- Allow rlogind to read nfs_t
This commit is contained in:
Daniel J Walsh 2008-11-05 22:21:30 +00:00
parent b7a27b75b0
commit 2a650ea1aa
2 changed files with 8 additions and 4 deletions

View File

@ -21322,7 +21322,7 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol
files_manage_etc_files(ricci_modstorage_t)
diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/rlogin.te serefpolicy-3.5.13/policy/modules/services/rlogin.te
--- nsaserefpolicy/policy/modules/services/rlogin.te 2008-08-07 11:15:11.000000000 -0400
+++ serefpolicy-3.5.13/policy/modules/services/rlogin.te 2008-11-05 16:47:28.000000000 -0500
+++ serefpolicy-3.5.13/policy/modules/services/rlogin.te 2008-11-05 17:20:28.000000000 -0500
@@ -94,10 +94,22 @@
remotelogin_signal(rlogind_t)
@ -21338,13 +21338,13 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol
')
+
+tunable_policy(`use_nfs_home_dirs',`
+ fs_list_nfs_dirs(rlogind_t)
+ fs_list_nfs(rlogind_t)
+ fs_read_nfs_files(rlogind_t)
+ fs_read_nfs_symlinks(rlogind_t)
+')
+
+tunable_policy(`use_samba_home_dirs',`
+ fs_list_cifs_dirs(rlogind_t)
+ fs_list_cifs(rlogind_t)
+ fs_read_cifs_files(rlogind_t)
+ fs_read_cifs_symlinks(rlogind_t)
+')

View File

@ -20,7 +20,7 @@
Summary: SELinux policy configuration
Name: selinux-policy
Version: 3.5.13
Release: 16%{?dist}
Release: 17%{?dist}
License: GPLv2+
Group: System Environment/Base
Source: serefpolicy-%{version}.tgz
@ -457,6 +457,10 @@ exit 0
%endif
%changelog
* Wed Nov 5 2008 Dan Walsh <dwalsh@redhat.com> 3.5.13-17
- Allow lvm to dbus chat with hal
- Allow rlogind to read nfs_t
* Wed Nov 5 2008 Dan Walsh <dwalsh@redhat.com> 3.5.13-16
- Fix cyphesis file context