Nslcd patch from Dan Walsh.

This commit is contained in:
Chris PeBenito 2009-12-18 10:44:49 -05:00
parent 80f0587459
commit 2d59a828b6
2 changed files with 8 additions and 3 deletions

View File

@ -76,7 +76,7 @@ interface(`nslcd_stream_connect',`
######################################## ########################################
## <summary> ## <summary>
## All of the rules required to administrate ## All of the rules required to administrate
## an nslcd environment ## an nslcd environment
## </summary> ## </summary>
## <param name="domain"> ## <param name="domain">
@ -94,6 +94,7 @@ interface(`nslcd_stream_connect',`
interface(`nslcd_admin',` interface(`nslcd_admin',`
gen_require(` gen_require(`
type nslcd_t, nslcd_initrc_exec_t; type nslcd_t, nslcd_initrc_exec_t;
type nslcd_conf_t, nslcd_var_run_t;
') ')
ps_process_pattern($1, nslcd_t) ps_process_pattern($1, nslcd_t)
@ -105,5 +106,9 @@ interface(`nslcd_admin',`
role_transition $2 nslcd_initrc_exec_t system_r; role_transition $2 nslcd_initrc_exec_t system_r;
allow $2 system_r; allow $2 system_r;
allow $1 nslcd_conf_t:file read_file_perms; manage_files_pattern($1, nslcd_conf_t, nslcd_conf_t)
manage_dirs_pattern($1, nslcd_var_run_t, nslcd_var_run_t)
manage_files_pattern($1, nslcd_var_run_t, nslcd_var_run_t)
manage_lnk_files_pattern($1, nslcd_var_run_t, nslcd_var_run_t)
') ')

View File

@ -1,5 +1,5 @@
policy_module(nslcd, 1.0.0) policy_module(nslcd, 1.0.1)
######################################## ########################################
# #