Snmp patch from Dan Walsh.

This commit is contained in:
Chris PeBenito 2010-03-22 11:08:31 -04:00
parent 08d7c7339b
commit 449d2069ac

View File

@ -1,5 +1,5 @@
policy_module(snmp, 1.10.1) policy_module(snmp, 1.10.2)
######################################## ########################################
# #
@ -25,7 +25,7 @@ files_type(snmpd_var_lib_t)
# #
# Local policy # Local policy
# #
allow snmpd_t self:capability { dac_override kill ipc_lock sys_ptrace net_admin sys_nice sys_tty_config }; allow snmpd_t self:capability { chown dac_override kill ipc_lock sys_ptrace net_admin sys_nice sys_tty_config };
dontaudit snmpd_t self:capability { sys_module sys_tty_config }; dontaudit snmpd_t self:capability { sys_module sys_tty_config };
allow snmpd_t self:process { signal_perms getsched setsched }; allow snmpd_t self:process { signal_perms getsched setsched };
allow snmpd_t self:fifo_file rw_fifo_file_perms; allow snmpd_t self:fifo_file rw_fifo_file_perms;