More fixes for numad

This commit is contained in:
Miroslav Grepl 2013-01-11 22:04:24 +01:00
parent a3277735dd
commit 9e49f866d4

View File

@ -44363,7 +44363,7 @@ index 0d3c270..709dda1 100644
+ ') + ')
') ')
diff --git a/numad.te b/numad.te diff --git a/numad.te b/numad.te
index f5d145d..a4fed11 100644 index f5d145d..97e1148 100644
--- a/numad.te --- a/numad.te
+++ b/numad.te +++ b/numad.te
@@ -1,4 +1,4 @@ @@ -1,4 +1,4 @@
@ -44401,7 +44401,7 @@ index f5d145d..a4fed11 100644
allow numad_t self:fifo_file rw_fifo_file_perms; allow numad_t self:fifo_file rw_fifo_file_perms;
-allow numad_t self:msg { send receive }; -allow numad_t self:msg { send receive };
allow numad_t self:msgq create_msgq_perms; allow numad_t self:msgq create_msgq_perms;
+allow numad_t self:msg create_msg_perms; +allow numad_t self:msg { send receive };
allow numad_t self:unix_stream_socket create_stream_socket_perms; allow numad_t self:unix_stream_socket create_stream_socket_perms;
-allow numad_t numad_log_t:file { append_file_perms create_file_perms setattr_file_perms }; -allow numad_t numad_log_t:file { append_file_perms create_file_perms setattr_file_perms };
@ -44419,11 +44419,11 @@ index f5d145d..a4fed11 100644
+domain_use_interactive_fds(numad_t) +domain_use_interactive_fds(numad_t)
+domain_read_all_domains_state(numad_t) +domain_read_all_domains_state(numad_t)
+domain_setpriority_all_domains(numad_t) +domain_setpriority_all_domains(numad_t)
+
-miscfiles_read_localization(numad_t)
+fs_manage_cgroup_dirs(numad_t) +fs_manage_cgroup_dirs(numad_t)
+fs_rw_cgroup_files(numad_t) +fs_rw_cgroup_files(numad_t)
+
-miscfiles_read_localization(numad_t)
+tunable_policy(`deny_ptrace',`',` +tunable_policy(`deny_ptrace',`',`
+ virt_ptrace(numad_t) + virt_ptrace(numad_t)
+') +')