rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Allow iscsid to manage tgtd semaphores

Browse Source
This commit is contained in:
Miroslav Grepl 2010-09-15 16:50:07 +02:00
parent 6dfe56b4e5
commit 3b0a9c74bb
3 changed files with 22 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
policy/modules/services/tgtd.if
View File

@ -26,3 +26,21 @@ interface(`tgtd_rw_semaphores',`
allow $1 tgtd_t:sem rw_sem_perms; allow $1 tgtd_t:sem rw_sem_perms;
') ')
######################################
## <summary>
## Manage tgtd sempaphores.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`tgtd_manage_semaphores',`
gen_require(`
type tgtd_t;
')
allow $1 tgtd_t:sem create_sem_perms;
')

2
policy/modules/services/tgtd.te
View File

@ -67,4 +67,6 @@ logging_send_syslog_msg(tgtd_t)
miscfiles_read_localization(tgtd_t) miscfiles_read_localization(tgtd_t)
optional_policy(`
iscsi_manage_semaphores(tgtd_t) iscsi_manage_semaphores(tgtd_t)
')

2
policy/modules/system/iscsi.te
View File

@ -93,5 +93,5 @@ logging_send_syslog_msg(iscsid_t)
miscfiles_read_localization(iscsid_t) miscfiles_read_localization(iscsid_t)
optional_policy(` optional_policy(`
tgtd_rw_semaphores(iscsid_t) tgtd_manage_semaphores(iscsid_t)
') ')