Begin removing qemu_t domain, we really no longer need this domain.
systemd_passwd needs dac_overide to communicate with users TTY's Allow svirt_lxc domains to send kill signals within their container
This commit is contained in:
parent
26536c5d39
commit
38087df72c
850
ptrace.patch
850
ptrace.patch
File diff suppressed because it is too large
Load Diff
19
qemu.patch
19
qemu.patch
@ -1,6 +1,6 @@
|
||||
diff -up serefpolicy-3.10.0/policy/modules/apps/qemu.te.qemu serefpolicy-3.10.0/policy/modules/apps/qemu.te
|
||||
--- serefpolicy-3.10.0/policy/modules/apps/qemu.te.qemu 2011-10-27 10:18:21.010189947 -0400
|
||||
+++ serefpolicy-3.10.0/policy/modules/apps/qemu.te 2011-10-27 10:18:22.989187237 -0400
|
||||
--- serefpolicy-3.10.0/policy/modules/apps/qemu.te.qemu 2011-10-27 14:01:31.490807653 -0400
|
||||
+++ serefpolicy-3.10.0/policy/modules/apps/qemu.te 2011-10-27 14:01:33.082806413 -0400
|
||||
@@ -40,9 +40,7 @@ gen_tunable(qemu_use_nfs, true)
|
||||
## </desc>
|
||||
gen_tunable(qemu_use_usb, true)
|
||||
@ -12,8 +12,8 @@ diff -up serefpolicy-3.10.0/policy/modules/apps/qemu.te.qemu serefpolicy-3.10.0/
|
||||
|
||||
########################################
|
||||
diff -up serefpolicy-3.10.0/policy/modules/services/virt.if.qemu serefpolicy-3.10.0/policy/modules/services/virt.if
|
||||
--- serefpolicy-3.10.0/policy/modules/services/virt.if.qemu 2011-10-27 10:18:22.901187358 -0400
|
||||
+++ serefpolicy-3.10.0/policy/modules/services/virt.if 2011-10-27 10:18:22.992187233 -0400
|
||||
--- serefpolicy-3.10.0/policy/modules/services/virt.if.qemu 2011-10-27 14:01:33.036806448 -0400
|
||||
+++ serefpolicy-3.10.0/policy/modules/services/virt.if 2011-10-27 14:01:33.084806412 -0400
|
||||
@@ -16,10 +16,11 @@ template(`virt_domain_template',`
|
||||
attribute virt_image_type, virt_domain;
|
||||
attribute virt_tmpfs_type;
|
||||
@ -50,8 +50,8 @@ diff -up serefpolicy-3.10.0/policy/modules/services/virt.if.qemu serefpolicy-3.1
|
||||
+')
|
||||
+
|
||||
diff -up serefpolicy-3.10.0/policy/modules/services/virt.te.qemu serefpolicy-3.10.0/policy/modules/services/virt.te
|
||||
--- serefpolicy-3.10.0/policy/modules/services/virt.te.qemu 2011-10-27 10:18:22.903187356 -0400
|
||||
+++ serefpolicy-3.10.0/policy/modules/services/virt.te 2011-10-27 10:19:28.334099091 -0400
|
||||
--- serefpolicy-3.10.0/policy/modules/services/virt.te.qemu 2011-10-27 14:01:33.038806446 -0400
|
||||
+++ serefpolicy-3.10.0/policy/modules/services/virt.te 2011-10-27 14:02:18.478770938 -0400
|
||||
@@ -73,11 +73,14 @@ gen_tunable(virt_use_usb, true)
|
||||
|
||||
virt_domain_template(svirt)
|
||||
@ -76,15 +76,10 @@ diff -up serefpolicy-3.10.0/policy/modules/services/virt.te.qemu serefpolicy-3.1
|
||||
allow virtd_t qemu_var_run_t:file relabel_file_perms;
|
||||
manage_dirs_pattern(virtd_t, qemu_var_run_t, qemu_var_run_t)
|
||||
manage_files_pattern(virtd_t, qemu_var_run_t, qemu_var_run_t)
|
||||
@@ -514,16 +519,6 @@ optional_policy(`
|
||||
@@ -514,11 +519,6 @@ optional_policy(`
|
||||
')
|
||||
|
||||
optional_policy(`
|
||||
- qemu_domtrans(virtd_t)
|
||||
- qemu_read_state(virtd_t)
|
||||
- qemu_signal(virtd_t)
|
||||
- qemu_kill(virtd_t)
|
||||
- qemu_setsched(virtd_t)
|
||||
- qemu_entry_type(virt_domain)
|
||||
- qemu_exec(virt_domain)
|
||||
-')
|
||||
|
Loading…
Reference in New Issue
Block a user