rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

more sediff

Browse Source
This commit is contained in:
Chris PeBenito 2005-10-24 14:15:29 +00:00
parent fa16f25281
commit 34e722f3cd
6 changed files with 16 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
refpolicy/policy/modules/kernel/corenetwork.te.in
View File

@ -46,7 +46,7 @@ network_port(amavisd_recv, tcp,10024,s0)
network_port(amavisd_send, tcp,10025,s0) network_port(amavisd_send, tcp,10025,s0)
network_port(asterisk, tcp,1720,s0, udp,2427,s0, udp,2727,s0, udp,4569,s0, udp,5060,s0) network_port(asterisk, tcp,1720,s0, udp,2427,s0, udp,2727,s0, udp,4569,s0, udp,5060,s0)
network_port(auth, tcp,113,s0) network_port(auth, tcp,113,s0)
type biff_port_t, port_type; dnl network_port(biff) # no defined portcon in current strict type biff_port_t, port_type, reserved_port_type; dnl network_port(biff) # no defined portcon in current strict
network_port(clamd, tcp,3310,s0) network_port(clamd, tcp,3310,s0)
network_port(clockspeed, udp,4041,s0) network_port(clockspeed, udp,4041,s0)
network_port(comsat, udp,512,s0) network_port(comsat, udp,512,s0)

1
refpolicy/policy/modules/kernel/devices.te
View File

@ -43,6 +43,7 @@ fs_associate_tmpfs(apm_bios_t)
type cardmgr_dev_t, device_node; type cardmgr_dev_t, device_node;
fs_associate(cardmgr_dev_t) fs_associate(cardmgr_dev_t)
fs_associate_tmpfs(cardmgr_dev_t) fs_associate_tmpfs(cardmgr_dev_t)
files_tmp_file(cardmgr_dev_t)
# #
# clock_device_t is the type of # clock_device_t is the type of

5
refpolicy/policy/modules/kernel/filesystem.te
View File

@ -53,9 +53,11 @@ allow configfs_t self:filesystem associate;
genfscon configfs / gen_context(system_u:object_r:configfs_t,s0) genfscon configfs / gen_context(system_u:object_r:configfs_t,s0)
type eventpollfs_t, filesystem_type; type eventpollfs_t, filesystem_type;
allow eventpollfs_t self:filesystem associate;
genfscon eventpollfs / gen_context(system_u:object_r:eventpollfs_t,s0) genfscon eventpollfs / gen_context(system_u:object_r:eventpollfs_t,s0)
type futexfs_t, filesystem_type; type futexfs_t, filesystem_type;
allow futexfs_t self:filesystem associate;
genfscon futexfs / gen_context(system_u:object_r:futexfs_t,s0) genfscon futexfs / gen_context(system_u:object_r:futexfs_t,s0)
type hugetlbfs_t, filesystem_type; type hugetlbfs_t, filesystem_type;
@ -68,6 +70,7 @@ allow inotifyfs_t self:filesystem associate;
genfscon inotifyfs / gen_context(system_u:object_r:inotifyfs_t,s0) genfscon inotifyfs / gen_context(system_u:object_r:inotifyfs_t,s0)
type nfsd_fs_t, filesystem_type; type nfsd_fs_t, filesystem_type;
allow nfsd_fs_t self:filesystem associate;
genfscon nfsd / gen_context(system_u:object_r:nfsd_fs_t,s0) genfscon nfsd / gen_context(system_u:object_r:nfsd_fs_t,s0)
type ramfs_t, filesystem_type; type ramfs_t, filesystem_type;
@ -80,6 +83,7 @@ genfscon romfs / gen_context(system_u:object_r:romfs_t,s0)
genfscon cramfs / gen_context(system_u:object_r:romfs_t,s0) genfscon cramfs / gen_context(system_u:object_r:romfs_t,s0)
type rpc_pipefs_t, filesystem_type; type rpc_pipefs_t, filesystem_type;
allow rpc_pipefs_t self:filesystem associate;
genfscon rpc_pipefs / gen_context(system_u:object_r:rpc_pipefs_t,s0) genfscon rpc_pipefs / gen_context(system_u:object_r:rpc_pipefs_t,s0)
# #
@ -144,6 +148,7 @@ genfscon udf / gen_context(system_u:object_r:iso9660_t,s0)
# #
type removable_t, filesystem_type, noxattrfs; type removable_t, filesystem_type, noxattrfs;
allow removable_t noxattrfs:filesystem associate; allow removable_t noxattrfs:filesystem associate;
files_type(removable_t)
# #
# nfs_t is the default type for NFS file systems # nfs_t is the default type for NFS file systems

4
refpolicy/policy/modules/kernel/kernel.te
View File

@ -221,6 +221,10 @@ ifdef(`targeted_policy',`
unconfined_domain_template(kernel_t) unconfined_domain_template(kernel_t)
') ')
optional_policy(`nis.te',`
nis_use_ypbind(kernel_t)
')
optional_policy(`rpc.te',` optional_policy(`rpc.te',`
# nfs kernel server needs kernel UDP access. It is less risky and painful # nfs kernel server needs kernel UDP access. It is less risky and painful
# to just give it everything. # to just give it everything.

2
refpolicy/policy/modules/services/distcc.te
View File

@ -57,7 +57,7 @@ corenet_tcp_sendrecv_all_ports(distccd_t)
corenet_udp_sendrecv_all_ports(distccd_t) corenet_udp_sendrecv_all_ports(distccd_t)
corenet_tcp_bind_all_nodes(distccd_t) corenet_tcp_bind_all_nodes(distccd_t)
corenet_udp_bind_all_nodes(distccd_t) corenet_udp_bind_all_nodes(distccd_t)
corenet_tcp_bind_distcc_port(distccd_t) corenet_tcp_bind_distccd_port(distccd_t)
dev_read_sysfs(distccd_t) dev_read_sysfs(distccd_t)

4
refpolicy/policy/modules/system/getty.te
View File

@ -91,6 +91,10 @@ logging_send_syslog_msg(getty_t)
miscfiles_read_localization(getty_t) miscfiles_read_localization(getty_t)
optional_policy(`nscd.te',`
nscd_use_socket(getty_t)
')
optional_policy(`ppp.te',` optional_policy(`ppp.te',`
ppp_domtrans(getty_t) ppp_domtrans(getty_t)
') ')