Nslcd patch from Dan Walsh.

This commit is contained in:
Chris PeBenito 2009-12-18 10:44:49 -05:00
parent 80f0587459
commit 2d59a828b6
2 changed files with 8 additions and 3 deletions

View File

@ -76,7 +76,7 @@ interface(`nslcd_stream_connect',`
########################################
## <summary>
## All of the rules required to administrate
## All of the rules required to administrate
## an nslcd environment
## </summary>
## <param name="domain">
@ -94,6 +94,7 @@ interface(`nslcd_stream_connect',`
interface(`nslcd_admin',`
gen_require(`
type nslcd_t, nslcd_initrc_exec_t;
type nslcd_conf_t, nslcd_var_run_t;
')
ps_process_pattern($1, nslcd_t)
@ -105,5 +106,9 @@ interface(`nslcd_admin',`
role_transition $2 nslcd_initrc_exec_t system_r;
allow $2 system_r;
allow $1 nslcd_conf_t:file read_file_perms;
manage_files_pattern($1, nslcd_conf_t, nslcd_conf_t)
manage_dirs_pattern($1, nslcd_var_run_t, nslcd_var_run_t)
manage_files_pattern($1, nslcd_var_run_t, nslcd_var_run_t)
manage_lnk_files_pattern($1, nslcd_var_run_t, nslcd_var_run_t)
')

View File

@ -1,5 +1,5 @@
policy_module(nslcd, 1.0.0)
policy_module(nslcd, 1.0.1)
########################################
#