rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

How libgroup init scripts interact with libcgroup.

Browse Source 
The libcgroup init scripts use tools in /usr/bin like cgexec and cgclear.

Signed-off-by: Dominick Grift <domg472@gmail.com>
Signed-off-by: Chris PeBenito <cpebenito@tresys.com>
This commit is contained in:
Dominick Grift 2010-06-07 20:25:59 +02:00 committed by Chris PeBenito
parent ddf821332f
commit 73f0985092
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
policy/modules/system/init.te
View File

@ -343,6 +343,9 @@ files_mounton_isid_type_dirs(initrc_t)
files_list_default(initrc_t) files_list_default(initrc_t)
files_mounton_default(initrc_t) files_mounton_default(initrc_t)
fs_delete_cgroup_dirs(initrc_t)
fs_list_cgroup_dirs(initrc_t)
fs_rw_cgroup_files(initrc_t)
fs_list_inotifyfs(initrc_t) fs_list_inotifyfs(initrc_t)
fs_register_binary_executable_type(initrc_t) fs_register_binary_executable_type(initrc_t)
# rhgb-console writes to ramfs # rhgb-console writes to ramfs
@ -571,6 +574,10 @@ optional_policy(`
bluetooth_read_config(initrc_t) bluetooth_read_config(initrc_t)
') ')
optional_policy(`
cgroup_stream_connect(initrc_t)
')
optional_policy(` optional_policy(`
clamav_read_config(initrc_t) clamav_read_config(initrc_t)
') ')