More fixes for numad

This commit is contained in:
Miroslav Grepl 2013-01-11 22:04:24 +01:00
parent a3277735dd
commit 9e49f866d4
1 changed files with 5 additions and 5 deletions

View File

@ -44363,7 +44363,7 @@ index 0d3c270..709dda1 100644
+ ')
')
diff --git a/numad.te b/numad.te
index f5d145d..a4fed11 100644
index f5d145d..97e1148 100644
--- a/numad.te
+++ b/numad.te
@@ -1,4 +1,4 @@
@ -44401,7 +44401,7 @@ index f5d145d..a4fed11 100644
allow numad_t self:fifo_file rw_fifo_file_perms;
-allow numad_t self:msg { send receive };
allow numad_t self:msgq create_msgq_perms;
+allow numad_t self:msg create_msg_perms;
+allow numad_t self:msg { send receive };
allow numad_t self:unix_stream_socket create_stream_socket_perms;
-allow numad_t numad_log_t:file { append_file_perms create_file_perms setattr_file_perms };
@ -44419,11 +44419,11 @@ index f5d145d..a4fed11 100644
+domain_use_interactive_fds(numad_t)
+domain_read_all_domains_state(numad_t)
+domain_setpriority_all_domains(numad_t)
-miscfiles_read_localization(numad_t)
+
+fs_manage_cgroup_dirs(numad_t)
+fs_rw_cgroup_files(numad_t)
+
-miscfiles_read_localization(numad_t)
+tunable_policy(`deny_ptrace',`',`
+ virt_ptrace(numad_t)
+')