rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

trunk: Add kernel_service access vectors, from Stephen Smalley.

Browse Source
This commit is contained in:
Chris PeBenito 2009-01-05 21:44:33 +00:00
parent e66a0cad18
commit 347a701119
3 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Changelog
View File

@ -1,3 +1,5 @@
- Add kernel_service access vectors, from Stephen Smalley.
* Wed Dec 10 2008 Chris PeBenito <selinux@tresys.com> - 2.20081210 * Wed Dec 10 2008 Chris PeBenito <selinux@tresys.com> - 2.20081210
- Fix consistency of audioentropy and iscsi module naming. - Fix consistency of audioentropy and iscsi module naming.
- Debian file context fix for xen from Russell Coker. - Debian file context fix for xen from Russell Coker.

6
policy/flask/access_vectors
View File

@ -782,3 +782,9 @@ class x_application_data
paste_after_confirm paste_after_confirm
copy copy
} }
class kernel_service
{
use_as_override
create_files_as
}

3
policy/flask/security_classes
View File

@ -116,4 +116,7 @@ class x_event # userspace
class x_synthetic_event # userspace class x_synthetic_event # userspace
class x_application_data # userspace class x_application_data # userspace
# kernel services that need to override task security, e.g. cachefiles
class kernel_service
# FLASK # FLASK