rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

updated mls comments from chad hanson

Browse Source
This commit is contained in:
Chris PeBenito 2006-03-13 15:36:38 +00:00
parent 77b81c6bb3
commit 63e0a1e078
2 changed files with 10 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
refpolicy/Changelog
View File

@ -1,3 +1,4 @@
- Updated comments in mls file from Chad Hanson.
- Added modules:
amavis (Erich Schubert)
apt (Erich Schubert)

12
refpolicy/policy/mls
View File

@ -293,8 +293,14 @@ mlsconstrain { socket tcp_socket udp_socket rawip_socket netlink_socket packet_s
#
# { tcp_socket unix_stream_socket } { connectto newconn acceptfrom }
#
# tcp_socket name_connect
#
# { netlink_route_socket netlink_firewall_socket netlink_tcpdiag_socket netlink_xfrm_socket netlink_audit_socket netlink_ip6fw_socket } nlmsg_write
#
# netlink_audit_socket { nlmsg_relay nlmsg_readpriv }
#
# netlink_kobject_uevent_socket *
#
@ -365,7 +371,7 @@ mlsconstrain { netif node } { tcp_send udp_send rawip_send }
(( l1 dom l2 ) and ( l1 domby h2 ));
# these access vectors have no MLS restrictions
# { netif node } { enforce_dest }
# node enforce_dest
@ -397,7 +403,7 @@ mlsconstrain process { sigkill sigstop signal setsched setpgid setcap setexec se
( t1 == mlsprocwrite ));
# these access vectors have no MLS restrictions
# process { fork sigchld signull noatsecure siginh setrlimit rlimitinh execmem }
# process { fork sigchld signull noatsecure siginh setrlimit rlimitinh execmem execstack execheap }
@ -663,6 +669,6 @@ mlsconstrain xinput { setattr relabelinput }
#
# these access vectors have no MLS restrictions
# association { sendto recvfrom }
# association *
') dnl end enable_mls