rpms/selinux-policy
5
0
Fork 0
Code Issues Pull Requests Releases Activity

Access for confined users to oidentd user home content is unconditional.

Browse Source 
Signed-off-by: Dominick Grift <domg472@gmail.com>
This commit is contained in:
Dominick Grift 2010-09-10 18:21:54 +02:00 committed by Chris PeBenito
parent da12b54802
commit 941e3db567
2 changed files with 10 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
policy/modules/roles/staff.te
View File

@ -26,6 +26,11 @@ optional_policy(`
dbadm_role_change(staff_r) dbadm_role_change(staff_r)
') ')
optional_policy(`
oident_manage_user_content(staff_t)
oident_relabel_user_content(staff_t)
')
optional_policy(` optional_policy(`
postgresql_role(staff_r, staff_t) postgresql_role(staff_r, staff_t)
') ')
@ -120,10 +125,6 @@ ifndef(`distro_redhat',`
mta_role(staff_r, staff_t) mta_role(staff_r, staff_t)
') ')
optional_policy(`
oident_manage_user_content(staff_t)
oident_relabel_user_content(staff_t)
')
optional_policy(` optional_policy(`
pyzor_role(staff_r, staff_t) pyzor_role(staff_r, staff_t)
') ')

10
policy/modules/roles/unprivuser.te
View File

@ -16,6 +16,11 @@ optional_policy(`
apache_role(user_r, user_t) apache_role(user_r, user_t)
') ')
optional_policy(`
oident_manage_user_content(user_t)
oident_relabel_user_content(user_t)
')
optional_policy(` optional_policy(`
screen_role_template(user, user_r, user_t) screen_role_template(user, user_r, user_t)
') ')
@ -93,11 +98,6 @@ ifndef(`distro_redhat',`
mta_role(user_r, user_t) mta_role(user_r, user_t)
') ')
optional_policy(`
oident_manage_user_content(user_t)
oident_relabel_user_content(user_t)
')
optional_policy(` optional_policy(`
postgresql_role(user_r, user_t) postgresql_role(user_r, user_t)
') ')