rpms/selinux-policy
6
0
Fork 0
Code Issues Pull Requests Releases Activity

Tuned patch from Dan Walsh.

Browse Source
This commit is contained in:
Chris PeBenito 2010-03-22 10:33:31 -04:00
parent 7630200e1b
commit 461b53e028
2 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
policy/modules/services/tuned.fc
View File

@ -2,4 +2,7 @@
/usr/sbin/tuned -- gen_context(system_u:object_r:tuned_exec_t,s0) /usr/sbin/tuned -- gen_context(system_u:object_r:tuned_exec_t,s0)
/var/log/tuned(/.*)? gen_context(system_u:object_r:tuned_log_t,s0)
/var/log/tuned\.log -- gen_context(system_u:object_r:tuned_log_t,s0)
/var/run/tuned\.pid -- gen_context(system_u:object_r:tuned_var_run_t,s0) /var/run/tuned\.pid -- gen_context(system_u:object_r:tuned_var_run_t,s0)

11
policy/modules/services/tuned.te
View File

@ -13,6 +13,9 @@ init_daemon_domain(tuned_t, tuned_exec_t)
type tuned_initrc_exec_t; type tuned_initrc_exec_t;
init_script_file(tuned_initrc_exec_t) init_script_file(tuned_initrc_exec_t)
type tuned_log_t;
logging_log_file(tuned_log_t)
type tuned_var_run_t; type tuned_var_run_t;
files_pid_file(tuned_var_run_t) files_pid_file(tuned_var_run_t)
@ -23,14 +26,20 @@ files_pid_file(tuned_var_run_t)
dontaudit tuned_t self:capability { dac_override sys_tty_config }; dontaudit tuned_t self:capability { dac_override sys_tty_config };
manage_dirs_pattern(tuned_t, tuned_log_t, tuned_log_t)
manage_files_pattern(tuned_t, tuned_log_t, tuned_log_t)
logging_log_filetrans(tuned_t, tuned_log_t, file)
manage_files_pattern(tuned_t, tuned_var_run_t, tuned_var_run_t) manage_files_pattern(tuned_t, tuned_var_run_t, tuned_var_run_t)
files_pid_filetrans(tuned_t, tuned_var_run_t, file) files_pid_filetrans(tuned_t, tuned_var_run_t, file)
corecmd_exec_shell(tuned_t) corecmd_exec_shell(tuned_t)
corecmd_exec_bin(tuned_t)
kernel_read_system_state(tuned_t) kernel_read_system_state(tuned_t)
kernel_read_network_state(tuned_t) kernel_read_network_state(tuned_t)
dev_read_urand(tuned_t)
dev_read_sysfs(tuned_t) dev_read_sysfs(tuned_t)
# to allow cpu tuning # to allow cpu tuning
dev_rw_netcontrol(tuned_t) dev_rw_netcontrol(tuned_t)
@ -39,6 +48,8 @@ files_read_etc_files(tuned_t)
files_read_usr_files(tuned_t) files_read_usr_files(tuned_t)
files_dontaudit_search_home(tuned_t) files_dontaudit_search_home(tuned_t)
logging_send_syslog_msg(tuned_t)
miscfiles_read_localization(tuned_t) miscfiles_read_localization(tuned_t)
userdom_dontaudit_search_user_home_dirs(tuned_t) userdom_dontaudit_search_user_home_dirs(tuned_t)