rpms/selinux-policy
5
0
Fork 0
Code Issues Pull Requests Releases Activity

trunk: Glibc 2.7 fix from Vaclav Ovsik.

Browse Source
This commit is contained in:
Chris PeBenito 2008-08-12 19:33:18 +00:00
parent cc1eee1202
commit 9c4500b2f4
3 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
Changelog
View File

@ -1,3 +1,4 @@
- Glibc 2.7 fix from Vaclav Ovsik.
- Samba/winbind update from Mike Edenfield. - Samba/winbind update from Mike Edenfield.
- Policy size optimization with a non-security file attribute from James - Policy size optimization with a non-security file attribute from James
Carter. Carter.

2
policy/modules/system/libraries.fc
View File

@ -296,6 +296,8 @@ HOME_DIR/.*/plugins/nprhapengine\.so.* -- gen_context(system_u:object_r:textrel_
# #
# /var # /var
# #
/var/cache/ldconfig(/.*)? gen_context(system_u:object_r:ldconfig_cache_t,s0)
/var/ftp/lib(64)?(/.*)? gen_context(system_u:object_r:lib_t,s0) /var/ftp/lib(64)?(/.*)? gen_context(system_u:object_r:lib_t,s0)
/var/ftp/lib(64)?/ld[^/]*\.so(\.[^/]*)* -- gen_context(system_u:object_r:ld_so_t,s0) /var/ftp/lib(64)?/ld[^/]*\.so(\.[^/]*)* -- gen_context(system_u:object_r:ld_so_t,s0)

7
policy/modules/system/libraries.te
View File

@ -1,5 +1,5 @@
policy_module(libraries, 2.2.0) policy_module(libraries, 2.2.1)
######################################## ########################################
# #
@ -23,6 +23,9 @@ type ldconfig_exec_t;
init_system_domain(ldconfig_t,ldconfig_exec_t) init_system_domain(ldconfig_t,ldconfig_exec_t)
role system_r types ldconfig_t; role system_r types ldconfig_t;
type ldconfig_cache_t;
files_type(ldconfig_cache_t)
type ldconfig_tmp_t; type ldconfig_tmp_t;
files_tmp_file(ldconfig_tmp_t) files_tmp_file(ldconfig_tmp_t)
@ -51,6 +54,8 @@ optional_policy(`
allow ldconfig_t self:capability sys_chroot; allow ldconfig_t self:capability sys_chroot;
manage_files_pattern(ldconfig_t, ldconfig_cache_t, ldconfig_cache_t)
allow ldconfig_t ld_so_cache_t:file manage_file_perms; allow ldconfig_t ld_so_cache_t:file manage_file_perms;
files_etc_filetrans(ldconfig_t,ld_so_cache_t,file) files_etc_filetrans(ldconfig_t,ld_so_cache_t,file)