rpms/selinux-policy
6
0
Fork 0
Code Issues Pull Requests Releases Activity

trunk: 2 patches from dan.

Browse Source
This commit is contained in:
Chris PeBenito 2008-08-14 15:10:41 +00:00
parent 3e59876583
commit 770c015f88
6 changed files with 29 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
policy/modules/kernel/filesystem.if
View File

@ -1285,6 +1285,24 @@ interface(`fs_unmount_fusefs',`
allow $1 fusefs_t:filesystem unmount; allow $1 fusefs_t:filesystem unmount;
') ')
########################################
## <summary>
## Read and write hugetlbfs files.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`fs_rw_hugetlbfs_files',`
gen_require(`
type hugetlbfs_t;
')
rw_files_pattern($1, hugetlbfs_t, hugetlbfs_t)
')
######################################## ########################################
## <summary> ## <summary>
## Search inotifyfs filesystem. ## Search inotifyfs filesystem.

2
policy/modules/kernel/filesystem.te
View File

@ -1,5 +1,5 @@
policy_module(filesystem, 1.10.0) policy_module(filesystem, 1.10.1)
######################################## ########################################
# #

1
policy/modules/services/postgresql.fc
View File

@ -28,6 +28,7 @@ ifdef(`distro_redhat', `
/var/lib/postgres(ql)?(/.*)? gen_context(system_u:object_r:postgresql_db_t,s0) /var/lib/postgres(ql)?(/.*)? gen_context(system_u:object_r:postgresql_db_t,s0)
/var/lib/pgsql/data(/.*)? gen_context(system_u:object_r:postgresql_db_t,s0) /var/lib/pgsql/data(/.*)? gen_context(system_u:object_r:postgresql_db_t,s0)
/var/lib/pgsql/logfile(/.*)? gen_context(system_u:object_r:postgresql_log_t,s0)
/var/lib/pgsql/pgstartup\.log gen_context(system_u:object_r:postgresql_log_t,s0) /var/lib/pgsql/pgstartup\.log gen_context(system_u:object_r:postgresql_log_t,s0)
/var/lib/sepgsql(/.*)? gen_context(system_u:object_r:postgresql_db_t,s0) /var/lib/sepgsql(/.*)? gen_context(system_u:object_r:postgresql_db_t,s0)

3
policy/modules/services/postgresql.te
View File

@ -1,5 +1,5 @@
policy_module(postgresql, 1.6.0) policy_module(postgresql, 1.6.1)
gen_require(` gen_require(`
class db_database all_db_database_perms; class db_database all_db_database_perms;
@ -186,6 +186,7 @@ dev_read_urand(postgresql_t)
fs_getattr_all_fs(postgresql_t) fs_getattr_all_fs(postgresql_t)
fs_search_auto_mountpoints(postgresql_t) fs_search_auto_mountpoints(postgresql_t)
fs_rw_hugetlbfs_files(postgresql_t)
selinux_get_enforce_mode(postgresql_t) selinux_get_enforce_mode(postgresql_t)
selinux_validate_context(postgresql_t) selinux_validate_context(postgresql_t)

6
policy/modules/system/iptables.if
View File

@ -49,6 +49,12 @@ interface(`iptables_run',`
iptables_domtrans($1) iptables_domtrans($1)
role $2 types iptables_t; role $2 types iptables_t;
allow iptables_t $3:chr_file rw_term_perms; allow iptables_t $3:chr_file rw_term_perms;
sysnet_run_ifconfig(iptables_t, $2, $3)
optional_policy(`
modutils_run_insmod(iptables_t, $2, $3)
')
') ')
######################################## ########################################

2
policy/modules/system/iptables.te
View File

@ -1,5 +1,5 @@
policy_module(iptables, 1.6.1) policy_module(iptables, 1.6.2)
######################################## ########################################
# #