- Fix vpn to bind to port 4500

- Allow ssh to create shm
- Allow rshd to bind to ports > 1023
- Add Kismet policy
This commit is contained in:
Daniel J Walsh 2007-10-18 22:00:35 +00:00
parent ccf8a72ae3
commit 953fd14b2e
2 changed files with 12 additions and 12 deletions

View File

@ -1128,8 +1128,8 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/kismet.
+/var/log/kismet(/.*)? gen_context(system_u:object_r:kismet_log_t,s0)
diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/kismet.if serefpolicy-3.0.8/policy/modules/admin/kismet.if
--- nsaserefpolicy/policy/modules/admin/kismet.if 1969-12-31 19:00:00.000000000 -0500
+++ serefpolicy-3.0.8/policy/modules/admin/kismet.if 2007-10-18 17:32:20.000000000 -0400
@@ -0,0 +1,277 @@
+++ serefpolicy-3.0.8/policy/modules/admin/kismet.if 2007-10-18 17:39:24.000000000 -0400
@@ -0,0 +1,276 @@
+
+## <summary>policy for kismet</summary>
+
@ -1187,9 +1187,9 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/kismet.
+ type kismet_var_run_t;
+ ')
+
+ manage_dir_perms($1,kismet_var_run_t,kismet_var_run_t)
+ manage_file_perms($1,kismet_var_run_t,kismet_var_run_t)
+ manage_lnk_file_perms($1,kismet_var_run_t,kismet_var_run_t)
+ manage_dirs_pattern($1,kismet_var_run_t,kismet_var_run_t)
+ manage_files_pattern($1,kismet_var_run_t,kismet_var_run_t)
+ manage_lnk_files_pattern($1,kismet_var_run_t,kismet_var_run_t)
+')
+
+
@ -1268,9 +1268,9 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/kismet.
+ type kismet_var_lib_t;
+ ')
+
+ manage_dir_perms($1,kismet_var_lib_t,kismet_var_lib_t)
+ manage_file_perms($1,kismet_var_lib_t,kismet_var_lib_t)
+ manage_lnk_file_perms($1,kismet_var_lib_t,kismet_var_lib_t)
+ manage_dirs_pattern($1,kismet_var_lib_t,kismet_var_lib_t)
+ manage_files_pattern($1,kismet_var_lib_t,kismet_var_lib_t)
+ manage_lnk_files_pattern($1,kismet_var_lib_t,kismet_var_lib_t)
+')
+
+
@ -1331,9 +1331,9 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/kismet.
+ type kismet_log_t;
+ ')
+
+ manage_dir_perms($1,kismet_log_t,kismet_log_t)
+ manage_file_perms($1,kismet_log_t,kismet_log_t)
+ manage_lnk_file_perms($1,kismet_log_t,kismet_log_t)
+ manage_dirs_pattern($1,kismet_log_t,kismet_log_t)
+ manage_files_pattern($1,kismet_log_t,kismet_log_t)
+ manage_lnk_files_pattern($1,kismet_log_t,kismet_log_t)
+')
+
+########################################
@ -1406,7 +1406,6 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/kismet.
+ kismet_manage_log($2)
+
+')
+
diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/kismet.te serefpolicy-3.0.8/policy/modules/admin/kismet.te
--- nsaserefpolicy/policy/modules/admin/kismet.te 1969-12-31 19:00:00.000000000 -0500
+++ serefpolicy-3.0.8/policy/modules/admin/kismet.te 2007-10-18 16:30:41.000000000 -0400

View File

@ -377,6 +377,7 @@ exit 0
- Fix vpn to bind to port 4500
- Allow ssh to create shm
- Allow rshd to bind to ports > 1023
- Add Kismet policy
* Tue Oct 16 2007 Dan Walsh <dwalsh@redhat.com> 3.0.8-24
- Allow rpm to chat with networkmanager