rpms/selinux-policy
5
0
Fork 0
Code Issues Pull Requests Releases Activity

trunk: Patch to add missing requirements in userdomain interfaces from Shintaro Fujiwara.

Browse Source
This commit is contained in:
Chris PeBenito 2007-09-17 18:04:35 +00:00
parent 0cf6df55e5
commit 6f49b490b8
3 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Changelog
View File

@ -1,3 +1,5 @@
- Patch to add missing requirements in userdomain interfaces from Shintaro
Fujiwara.
- Add tcpd_wrapped_domain() for services that use tcp wrappers. - Add tcpd_wrapped_domain() for services that use tcp wrappers.
- Update MLS constraints from LSPP evaluated policy. - Update MLS constraints from LSPP evaluated policy.
- Allow initrc_t file descriptors to be inherited regardless of MLS level. - Allow initrc_t file descriptors to be inherited regardless of MLS level.

8
policy/modules/system/userdomain.if
View File

@ -5076,7 +5076,7 @@ interface(`userdom_manage_generic_user_home_dirs',`
# #
interface(`userdom_manage_generic_user_home_content_dirs',` interface(`userdom_manage_generic_user_home_content_dirs',`
gen_require(` gen_require(`
type user_home_t; type user_home_dir_t, user_home_t;
') ')
files_search_home($1) files_search_home($1)
@ -5194,7 +5194,7 @@ interface(`userdom_dontaudit_relabel_generic_user_home_content_files',`
# #
interface(`userdom_manage_generic_user_home_content_symlinks',` interface(`userdom_manage_generic_user_home_content_symlinks',`
gen_require(` gen_require(`
type user_home_t; type user_home_dir_t, user_home_t;
') ')
files_search_home($1) files_search_home($1)
@ -5214,7 +5214,7 @@ interface(`userdom_manage_generic_user_home_content_symlinks',`
# #
interface(`userdom_manage_generic_user_home_content_pipes',` interface(`userdom_manage_generic_user_home_content_pipes',`
gen_require(` gen_require(`
type user_home_t; type user_home_dir_t, user_home_t;
') ')
files_search_home($1) files_search_home($1)
@ -5234,7 +5234,7 @@ interface(`userdom_manage_generic_user_home_content_pipes',`
# #
interface(`userdom_manage_generic_user_home_content_sockets',` interface(`userdom_manage_generic_user_home_content_sockets',`
gen_require(` gen_require(`
type user_home_t; type user_home_dir_t, user_home_t;
') ')
files_search_home($1) files_search_home($1)

2
policy/modules/system/userdomain.te
View File

@ -1,5 +1,5 @@
policy_module(userdomain,2.3.1) policy_module(userdomain,2.3.2)
gen_require(` gen_require(`
role sysadm_r, staff_r, user_r; role sysadm_r, staff_r, user_r;