The ps_process_pattern includes permission to get attributes of target domain.

This commit is contained in:
Dominick Grift 2010-09-17 13:28:50 +02:00
parent 6bb4d401ee
commit 86f9f96664

View File

@ -1322,7 +1322,7 @@ interface(`apache_admin',`
type httpd_suexec_tmp_t, httpd_tmp_t;
')
allow $1 httpd_t:process { getattr ptrace signal_perms };
allow $1 httpd_t:process { ptrace signal_perms };
ps_process_pattern($1, httpd_t)
init_labeled_script_domtrans($1, httpd_initrc_exec_t)