rpms/selinux-policy
6
0
Fork 0
Code Issues Pull Requests Releases Activity

Begin removing qemu_t domain, we really no longer need this domain.

Browse Source 
systemd_passwd needs dac_overide to communicate with users TTY's
Allow svirt_lxc domains to send kill signals within their container
This commit is contained in:
Dan Walsh 2011-10-27 14:06:19 -04:00
parent 26536c5d39
commit 38087df72c
2 changed files with 432 additions and 437 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

850
ptrace.patch
View File

File diff suppressed because it is too large Load Diff

19
qemu.patch
View File

@ -1,6 +1,6 @@
diff -up serefpolicy-3.10.0/policy/modules/apps/qemu.te.qemu serefpolicy-3.10.0/policy/modules/apps/qemu.te diff -up serefpolicy-3.10.0/policy/modules/apps/qemu.te.qemu serefpolicy-3.10.0/policy/modules/apps/qemu.te
--- serefpolicy-3.10.0/policy/modules/apps/qemu.te.qemu 2011-10-27 10:18:21.010189947 -0400 --- serefpolicy-3.10.0/policy/modules/apps/qemu.te.qemu 2011-10-27 14:01:31.490807653 -0400
+++ serefpolicy-3.10.0/policy/modules/apps/qemu.te 2011-10-27 10:18:22.989187237 -0400 +++ serefpolicy-3.10.0/policy/modules/apps/qemu.te 2011-10-27 14:01:33.082806413 -0400
@@ -40,9 +40,7 @@ gen_tunable(qemu_use_nfs, true) @@ -40,9 +40,7 @@ gen_tunable(qemu_use_nfs, true)
## </desc> ## </desc>
gen_tunable(qemu_use_usb, true) gen_tunable(qemu_use_usb, true)
@ -12,8 +12,8 @@ diff -up serefpolicy-3.10.0/policy/modules/apps/qemu.te.qemu serefpolicy-3.10.0/
######################################## ########################################
diff -up serefpolicy-3.10.0/policy/modules/services/virt.if.qemu serefpolicy-3.10.0/policy/modules/services/virt.if diff -up serefpolicy-3.10.0/policy/modules/services/virt.if.qemu serefpolicy-3.10.0/policy/modules/services/virt.if
--- serefpolicy-3.10.0/policy/modules/services/virt.if.qemu 2011-10-27 10:18:22.901187358 -0400 --- serefpolicy-3.10.0/policy/modules/services/virt.if.qemu 2011-10-27 14:01:33.036806448 -0400
+++ serefpolicy-3.10.0/policy/modules/services/virt.if 2011-10-27 10:18:22.992187233 -0400 +++ serefpolicy-3.10.0/policy/modules/services/virt.if 2011-10-27 14:01:33.084806412 -0400
@@ -16,10 +16,11 @@ template(`virt_domain_template',` @@ -16,10 +16,11 @@ template(`virt_domain_template',`
attribute virt_image_type, virt_domain; attribute virt_image_type, virt_domain;
attribute virt_tmpfs_type; attribute virt_tmpfs_type;
@ -50,8 +50,8 @@ diff -up serefpolicy-3.10.0/policy/modules/services/virt.if.qemu serefpolicy-3.1
+') +')
+ +
diff -up serefpolicy-3.10.0/policy/modules/services/virt.te.qemu serefpolicy-3.10.0/policy/modules/services/virt.te diff -up serefpolicy-3.10.0/policy/modules/services/virt.te.qemu serefpolicy-3.10.0/policy/modules/services/virt.te
--- serefpolicy-3.10.0/policy/modules/services/virt.te.qemu 2011-10-27 10:18:22.903187356 -0400 --- serefpolicy-3.10.0/policy/modules/services/virt.te.qemu 2011-10-27 14:01:33.038806446 -0400
+++ serefpolicy-3.10.0/policy/modules/services/virt.te 2011-10-27 10:19:28.334099091 -0400 +++ serefpolicy-3.10.0/policy/modules/services/virt.te 2011-10-27 14:02:18.478770938 -0400
@@ -73,11 +73,14 @@ gen_tunable(virt_use_usb, true) @@ -73,11 +73,14 @@ gen_tunable(virt_use_usb, true)
virt_domain_template(svirt) virt_domain_template(svirt)
@ -76,15 +76,10 @@ diff -up serefpolicy-3.10.0/policy/modules/services/virt.te.qemu serefpolicy-3.1
allow virtd_t qemu_var_run_t:file relabel_file_perms; allow virtd_t qemu_var_run_t:file relabel_file_perms;
manage_dirs_pattern(virtd_t, qemu_var_run_t, qemu_var_run_t) manage_dirs_pattern(virtd_t, qemu_var_run_t, qemu_var_run_t)
manage_files_pattern(virtd_t, qemu_var_run_t, qemu_var_run_t) manage_files_pattern(virtd_t, qemu_var_run_t, qemu_var_run_t)
@@ -514,16 +519,6 @@ optional_policy(` @@ -514,11 +519,6 @@ optional_policy(`
') ')
optional_policy(` optional_policy(`
- qemu_domtrans(virtd_t)
- qemu_read_state(virtd_t)
- qemu_signal(virtd_t)
- qemu_kill(virtd_t)
- qemu_setsched(virtd_t)
- qemu_entry_type(virt_domain) - qemu_entry_type(virt_domain)
- qemu_exec(virt_domain) - qemu_exec(virt_domain)
-') -')