From 323c9f13bbfe8ab60e91a34a32ac22b006052136 Mon Sep 17 00:00:00 2001 From: Miroslav Grepl Date: Tue, 14 Sep 2010 19:28:55 +0200 Subject: [PATCH] Fixes for vmware-host policy --- policy/modules/apps/vmware.te | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/policy/modules/apps/vmware.te b/policy/modules/apps/vmware.te index 8a973036..4bdcbe3d 100644 --- a/policy/modules/apps/vmware.te +++ b/policy/modules/apps/vmware.te @@ -134,6 +134,7 @@ domain_dontaudit_read_all_domains_state(vmware_host_t) files_list_tmp(vmware_host_t) files_read_etc_files(vmware_host_t) files_read_etc_runtime_files(vmware_host_t) +files_read_usr_files(vmware_host_t) fs_getattr_all_fs(vmware_host_t) fs_search_auto_mountpoints(vmware_host_t) @@ -152,12 +153,21 @@ logging_send_syslog_msg(vmware_host_t) miscfiles_read_localization(vmware_host_t) sysnet_dns_name_resolve(vmware_host_t) +sysnet_domtrans_ifconfig(vmware_host_t) userdom_dontaudit_use_unpriv_user_fds(vmware_host_t) userdom_dontaudit_search_user_home_dirs(vmware_host_t) netutils_domtrans_ping(vmware_host_t) +optional_policy(` + hostname_exec(vmware_host_t) +') + +optional_policy(` + modutils_domtrans_insmod(vmware_host_t) +') + optional_policy(` seutil_sigchld_newrole(vmware_host_t) ')