rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

trunk: a pair of tweaks from gentoo systems.

Browse Source
This commit is contained in:
Chris PeBenito 2008-03-14 14:55:34 +00:00
parent 47333d8246
commit 91d6c92160
2 changed files with 4 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
policy/modules/kernel/selinux.te
View File

@ -1,5 +1,5 @@
policy_module(selinux,1.5.0)
policy_module(selinux,1.5.1)
########################################
#
@ -21,6 +21,7 @@ fs_type(security_t)
mls_trusted_object(security_t)
sid security gen_context(system_u:object_r:security_t,mls_systemhigh)
genfscon selinuxfs / gen_context(system_u:object_r:security_t,s0)
genfscon securityfs / gen_context(system_u:object_r:security_t,s0)
neverallow ~{ selinux_unconfined_type can_load_policy } security_t:security load_policy;
neverallow ~{ selinux_unconfined_type can_setenforce } security_t:security setenforce;

12
policy/modules/system/getty.te
View File

@ -1,5 +1,5 @@
policy_module(getty,1.5.1)
policy_module(getty,1.5.2)
########################################
#
@ -103,15 +103,7 @@ miscfiles_read_localization(getty_t)
ifdef(`distro_gentoo',`
# Gentoo default /etc/issue makes agetty
# do a DNS lookup for the hostname
dontaudit getty_t self:udp_socket create_socket_perms;
corenet_dontaudit_all_recvfrom_unlabeled(getty_t)
corenet_dontaudit_udp_sendrecv_generic_if(getty_t)
corenet_dontaudit_udp_sendrecv_all_nodes(getty_t)
corenet_dontaudit_udp_sendrecv_dns_port(getty_t)
corenet_dontaudit_sendrecv_dns_client_packets(getty_t)
sysnet_dontaudit_read_config(getty_t)
sysnet_dns_name_resolve(getty_t)
')
ifdef(`distro_redhat',`