rpms
/
selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

- Fix vpn to bind to port 4500 

- Allow ssh to create shm
- Allow rshd to bind to ports > 1023
- Add Kismet policy
This commit is contained in:
Daniel J Walsh 2007-10-18 22:00:35 +00:00
parent ccf8a72ae3
commit 953fd14b2e
2 changed files with 12 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
policy-20070703.patch
View File

@ -1128,8 +1128,8 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/kismet.
+/var/log/kismet(/.*)? gen_context(system_u:object_r:kismet_log_t,s0) +/var/log/kismet(/.*)? gen_context(system_u:object_r:kismet_log_t,s0)
diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/kismet.if serefpolicy-3.0.8/policy/modules/admin/kismet.if diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/kismet.if serefpolicy-3.0.8/policy/modules/admin/kismet.if
--- nsaserefpolicy/policy/modules/admin/kismet.if 1969-12-31 19:00:00.000000000 -0500 --- nsaserefpolicy/policy/modules/admin/kismet.if 1969-12-31 19:00:00.000000000 -0500
+++ serefpolicy-3.0.8/policy/modules/admin/kismet.if 2007-10-18 17:32:20.000000000 -0400 +++ serefpolicy-3.0.8/policy/modules/admin/kismet.if 2007-10-18 17:39:24.000000000 -0400
@@ -0,0 +1,277 @@ @@ -0,0 +1,276 @@
+ +
+## <summary>policy for kismet</summary> +## <summary>policy for kismet</summary>
+ +
@ -1187,9 +1187,9 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/kismet.
+ type kismet_var_run_t; + type kismet_var_run_t;
+ ') + ')
+ +
+ manage_dir_perms($1,kismet_var_run_t,kismet_var_run_t) + manage_dirs_pattern($1,kismet_var_run_t,kismet_var_run_t)
+ manage_file_perms($1,kismet_var_run_t,kismet_var_run_t) + manage_files_pattern($1,kismet_var_run_t,kismet_var_run_t)
+ manage_lnk_file_perms($1,kismet_var_run_t,kismet_var_run_t) + manage_lnk_files_pattern($1,kismet_var_run_t,kismet_var_run_t)
+') +')
+ +
+ +
@ -1268,9 +1268,9 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/kismet.
+ type kismet_var_lib_t; + type kismet_var_lib_t;
+ ') + ')
+ +
+ manage_dir_perms($1,kismet_var_lib_t,kismet_var_lib_t) + manage_dirs_pattern($1,kismet_var_lib_t,kismet_var_lib_t)
+ manage_file_perms($1,kismet_var_lib_t,kismet_var_lib_t) + manage_files_pattern($1,kismet_var_lib_t,kismet_var_lib_t)
+ manage_lnk_file_perms($1,kismet_var_lib_t,kismet_var_lib_t) + manage_lnk_files_pattern($1,kismet_var_lib_t,kismet_var_lib_t)
+') +')
+ +
+ +
@ -1331,9 +1331,9 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/kismet.
+ type kismet_log_t; + type kismet_log_t;
+ ') + ')
+ +
+ manage_dir_perms($1,kismet_log_t,kismet_log_t) + manage_dirs_pattern($1,kismet_log_t,kismet_log_t)
+ manage_file_perms($1,kismet_log_t,kismet_log_t) + manage_files_pattern($1,kismet_log_t,kismet_log_t)
+ manage_lnk_file_perms($1,kismet_log_t,kismet_log_t) + manage_lnk_files_pattern($1,kismet_log_t,kismet_log_t)
+') +')
+ +
+######################################## +########################################
@ -1406,7 +1406,6 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/kismet.
+ kismet_manage_log($2) + kismet_manage_log($2)
+ +
+') +')
+
diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/kismet.te serefpolicy-3.0.8/policy/modules/admin/kismet.te diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/kismet.te serefpolicy-3.0.8/policy/modules/admin/kismet.te
--- nsaserefpolicy/policy/modules/admin/kismet.te 1969-12-31 19:00:00.000000000 -0500 --- nsaserefpolicy/policy/modules/admin/kismet.te 1969-12-31 19:00:00.000000000 -0500
+++ serefpolicy-3.0.8/policy/modules/admin/kismet.te 2007-10-18 16:30:41.000000000 -0400 +++ serefpolicy-3.0.8/policy/modules/admin/kismet.te 2007-10-18 16:30:41.000000000 -0400

1
selinux-policy.spec
View File

@ -377,6 +377,7 @@ exit 0
- Fix vpn to bind to port 4500 - Fix vpn to bind to port 4500
- Allow ssh to create shm - Allow ssh to create shm
- Allow rshd to bind to ports > 1023 - Allow rshd to bind to ports > 1023
- Add Kismet policy
* Tue Oct 16 2007 Dan Walsh <dwalsh@redhat.com> 3.0.8-24 * Tue Oct 16 2007 Dan Walsh <dwalsh@redhat.com> 3.0.8-24
- Allow rpm to chat with networkmanager - Allow rpm to chat with networkmanager