-##
-## Likewise Open is a free, open source application that joins Linux, Unix,
-## and Mac machines to Microsoft Active Directory to securely authenticate
-## users with their domain credentials.
-##
+##
+## Likewise Open is a free, open source application that joins Linux, Unix,
+## and Mac machines to Microsoft Active Directory to securely authenticate
+## users with their domain credentials.
+##
##
#######################################
diff --git a/policy/modules/services/likewise.te b/policy/modules/services/likewise.te
index 731399f3..5f2bded9 100644
--- a/policy/modules/services/likewise.te
+++ b/policy/modules/services/likewise.te
@@ -3,7 +3,7 @@ policy_module(likewise, 1.0.0)
#################################
#
-# Likewise global personal declarations.
+# Declarations
#
attribute likewise_domains;
@@ -23,69 +23,25 @@ files_type(likewise_pstore_lock_t)
type likewise_krb5_ad_t;
files_type(likewise_krb5_ad_t)
-#############################
-#
-# Likewise dcerpcd personal declarations.
-#
-
likewise_domain_template(dcerpcd)
-#############################
-#
-# Likewise eventlogd personal declarations.
-#
-
likewise_domain_template(eventlogd)
-#############################
-#
-# Likewise lsassd personal declarations.
-#
-
likewise_domain_template(lsassd)
type lsassd_tmp_t;
files_tmp_file(lsassd_tmp_t)
-#############################
-#
-# Likewise lwiod personal declarations.
-#
-
likewise_domain_template(lwiod)
-#############################
-#
-# Likewise lwregd personal declarations.
-#
-
likewise_domain_template(lwregd)
-#############################
-#
-# Likewise lwsmd personal declarations.
-#
-
likewise_domain_template(lwsmd)
-#############################
-#
-# Likewise netlogond personal declarations.
-#
-
likewise_domain_template(netlogond)
-#############################
-#
-# Likewise srvsvcd personal declarations.
-#
-
likewise_domain_template(srvsvcd)
-##################################
-#
-# Likewise global personal policy.
-
#################################
#
# Likewise dcerpcd personal policy
@@ -134,8 +90,8 @@ corenet_udp_sendrecv_generic_port(eventlogd_t)
# Likewise Authentication service local policy
#
-allow lsassd_t self:capability {fowner chown fsetid dac_override sys_time};
-allow lsassd_t self:unix_stream_socket {create_stream_socket_perms connectto};
+allow lsassd_t self:capability { fowner chown fsetid dac_override sys_time };
+allow lsassd_t self:unix_stream_socket { create_stream_socket_perms connectto };
allow lsassd_t self:netlink_route_socket rw_netlink_socket_perms;
allow lsassd_t likewise_krb5_ad_t:file read_file_perms;
@@ -152,6 +108,11 @@ stream_connect_pattern(lsassd_t, likewise_var_lib_t, lwiod_var_socket_t, lwiod_t
stream_connect_pattern(lsassd_t, likewise_var_lib_t, lwregd_var_socket_t, lwregd_t)
stream_connect_pattern(lsassd_t, likewise_var_lib_t, netlogond_var_socket_t, netlogond_t)
+kernel_read_system_state(lsassd_t)
+kernel_getattr_proc_files(lsassd_t)
+kernel_list_all_proc(lsassd_t)
+kernel_list_proc(lsassd_t)
+
corecmd_exec_bin(lsassd_t)
corecmd_exec_shell(lsassd_t)
@@ -164,19 +125,13 @@ corenet_tcp_bind_generic_node(lsassd_t)
corenet_tcp_connect_epmap_port(lsassd_t)
corenet_tcp_sendrecv_epmap_port(lsassd_t)
+domain_obj_id_change_exemption(lsassd_t)
+
files_manage_etc_files(lsassd_t)
files_manage_etc_symlinks(lsassd_t)
files_manage_etc_runtime_files(lsassd_t)
-
files_relabelto_home(lsassd_t)
-kernel_read_system_state(lsassd_t)
-kernel_getattr_proc_files(lsassd_t)
-kernel_list_all_proc(lsassd_t)
-kernel_list_proc(lsassd_t)
-
-domain_obj_id_change_exemption(lsassd_t)
-
selinux_get_fs_mount(lsassd_t)
selinux_validate_context(lsassd_t)
@@ -201,7 +156,7 @@ optional_policy(`
# Likewise I/O service local policy
#
-allow lwiod_t self:capability {fowner chown fsetid dac_override };
+allow lwiod_t self:capability { fowner chown fsetid dac_override };
allow lwiod_t self:netlink_route_socket rw_netlink_socket_perms;
allow lwiod_t likewise_krb5_ad_t:file read_file_perms;
@@ -228,11 +183,6 @@ optional_policy(`
kerberos_use(lwiod_t)
')
-#################################
-#
-# Likewise Registry server local policy
-#
-
#################################
#
# Likewise Service Manager service local policy
diff --git a/policy/modules/system/authlogin.te b/policy/modules/system/authlogin.te
index 09c50021..39cf811d 100644
--- a/policy/modules/system/authlogin.te
+++ b/policy/modules/system/authlogin.te
@@ -1,5 +1,5 @@
-policy_module(authlogin, 2.1.2)
+policy_module(authlogin, 2.1.3)
########################################
#