apm patch from Dan Walsh.

This commit is contained in:
Chris PeBenito 2009-12-18 10:35:31 -05:00
parent 41c139dc77
commit 7e81399d84

View File

@ -1,5 +1,5 @@
policy_module(apm, 1.10.0)
policy_module(apm, 1.10.1)
########################################
#
@ -60,7 +60,7 @@ logging_send_syslog_msg(apm_t)
# mknod: controlling an orderly resume of PCMCIA requires creating device
# nodes 254,{0,1,2} for some reason.
allow apmd_t self:capability { sys_admin sys_nice sys_time kill mknod };
dontaudit apmd_t self:capability { setuid dac_override dac_read_search sys_tty_config };
dontaudit apmd_t self:capability { setuid dac_override dac_read_search sys_ptrace sys_tty_config };
allow apmd_t self:process { signal_perms getsession };
allow apmd_t self:fifo_file rw_fifo_file_perms;
allow apmd_t self:unix_dgram_socket create_socket_perms;