From 9b06402eaf378b7ecaa1cbf68c7d52b44fdfe133 Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Thu, 8 Sep 2005 13:23:11 +0000 Subject: [PATCH] add missing rules of other domains using inn --- refpolicy/policy/modules/services/cron.te | 6 ++++++ refpolicy/policy/modules/system/init.te | 4 ++++ refpolicy/policy/modules/system/logging.te | 4 ++++ refpolicy/policy/modules/system/userdomain.if | 6 ++++++ 4 files changed, 20 insertions(+) diff --git a/refpolicy/policy/modules/services/cron.te b/refpolicy/policy/modules/services/cron.te index d0ddc63b..f93be50b 100644 --- a/refpolicy/policy/modules/services/cron.te +++ b/refpolicy/policy/modules/services/cron.te @@ -137,6 +137,12 @@ tunable_policy(`fcron_crond', ` allow crond_t system_cron_spool_t:file create_file_perms; ') +optional_policy(`inn.te',` + inn_manage_log(system_crond_t) + inn_manage_pid(system_crond_t) + inn_read_config(system_crond_t) +') + optional_policy(`nis.te',` nis_use_ypbind(crond_t) ') diff --git a/refpolicy/policy/modules/system/init.te b/refpolicy/policy/modules/system/init.te index 1a7e128e..18a32f26 100644 --- a/refpolicy/policy/modules/system/init.te +++ b/refpolicy/policy/modules/system/init.te @@ -396,6 +396,10 @@ optional_policy(`hotplug.te',` modutils_read_mods_deps(initrc_t) ') +optional_policy(`inn.te',` + inn_exec_config(initrc_t) +') + optional_policy(`ipsec.te',` ipsec_read_config(initrc_t) ipsec_manage_pid(initrc_t) diff --git a/refpolicy/policy/modules/system/logging.te b/refpolicy/policy/modules/system/logging.te index 5de1e2c4..1625b3db 100644 --- a/refpolicy/policy/modules/system/logging.te +++ b/refpolicy/policy/modules/system/logging.te @@ -264,6 +264,10 @@ optional_policy(`cron.te',` cron_rw_log(syslogd_t) ') +optional_policy(`inn.te',` + inn_manage_log(syslogd_t) +') + optional_policy(`nis.te',` nis_use_ypbind(syslogd_t) ') diff --git a/refpolicy/policy/modules/system/userdomain.if b/refpolicy/policy/modules/system/userdomain.if index 939929e0..99963248 100644 --- a/refpolicy/policy/modules/system/userdomain.if +++ b/refpolicy/policy/modules/system/userdomain.if @@ -253,6 +253,12 @@ template(`base_user_template',` inetd_tcp_connect($1_t) ') + optional_policy(`inn.te',` + inn_read_config($1_t) + inn_read_news_lib($1_t) + inn_read_news_spool($1_t) + ') + optional_policy(`nis.te',` nis_use_ypbind($1_t) ')