trunk: additional open fixes.
This commit is contained in:
parent
82d2775c92
commit
932c3536f8
@ -104,7 +104,7 @@ template(`authlogin_per_role_template',`
|
||||
role $3 types $1_chkpwd_t;
|
||||
role $3 types system_chkpwd_t;
|
||||
|
||||
dontaudit $2 shadow_t:file { getattr read };
|
||||
dontaudit $2 shadow_t:file read_file_perms;
|
||||
|
||||
# Transition from the user domain to this domain.
|
||||
domtrans_pattern($2,chkpwd_exec_t,$1_chkpwd_t)
|
||||
@ -562,7 +562,7 @@ interface(`auth_dontaudit_read_shadow',`
|
||||
type shadow_t;
|
||||
')
|
||||
|
||||
dontaudit $1 shadow_t:file { getattr read };
|
||||
dontaudit $1 shadow_t:file read_file_perms;
|
||||
')
|
||||
|
||||
########################################
|
||||
|
@ -1,5 +1,5 @@
|
||||
|
||||
policy_module(authlogin, 1.11.0)
|
||||
policy_module(authlogin, 1.11.1)
|
||||
|
||||
########################################
|
||||
#
|
||||
|
@ -589,7 +589,7 @@ interface(`seutil_dontaudit_search_config',`
|
||||
type selinux_config_t;
|
||||
')
|
||||
|
||||
dontaudit $1 selinux_config_t:dir search;
|
||||
dontaudit $1 selinux_config_t:dir search_dir_perms;
|
||||
')
|
||||
|
||||
########################################
|
||||
@ -608,8 +608,8 @@ interface(`seutil_dontaudit_read_config',`
|
||||
type selinux_config_t;
|
||||
')
|
||||
|
||||
dontaudit $1 selinux_config_t:dir search;
|
||||
dontaudit $1 selinux_config_t:file { getattr read };
|
||||
dontaudit $1 selinux_config_t:dir search_dir_perms;
|
||||
dontaudit $1 selinux_config_t:file read_file_perms;
|
||||
')
|
||||
|
||||
########################################
|
||||
|
@ -1,5 +1,5 @@
|
||||
|
||||
policy_module(selinuxutil, 1.11.0)
|
||||
policy_module(selinuxutil, 1.11.1)
|
||||
|
||||
gen_require(`
|
||||
bool secure_mode;
|
||||
|
Loading…
Reference in New Issue
Block a user