Snmp patch from Dan Walsh.

This commit is contained in:
Chris PeBenito 2010-03-22 11:08:31 -04:00
parent 08d7c7339b
commit 449d2069ac

View File

@ -1,5 +1,5 @@
policy_module(snmp, 1.10.1)
policy_module(snmp, 1.10.2)
########################################
#
@ -25,7 +25,7 @@ files_type(snmpd_var_lib_t)
#
# Local policy
#
allow snmpd_t self:capability { dac_override kill ipc_lock sys_ptrace net_admin sys_nice sys_tty_config };
allow snmpd_t self:capability { chown dac_override kill ipc_lock sys_ptrace net_admin sys_nice sys_tty_config };
dontaudit snmpd_t self:capability { sys_module sys_tty_config };
allow snmpd_t self:process { signal_perms getsched setsched };
allow snmpd_t self:fifo_file rw_fifo_file_perms;