rpms/selinux-policy
5
0
Fork 0
Code Issues Pull Requests Releases Activity

trunk: su fixes from clip.

Browse Source
This commit is contained in:
Chris PeBenito 2009-01-13 19:44:23 +00:00
parent f0435b1ac4
commit 9e7a338509
3 changed files with 20 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
Changelog
View File

@ -1,3 +1,4 @@
- Several fixes from the CLIP project.
- Add support for labeled Booleans. - Add support for labeled Booleans.
- Remove node definitions and change node usage to generic nodes. - Remove node definitions and change node usage to generic nodes.
- Add kernel_service access vectors, from Stephen Smalley. - Add kernel_service access vectors, from Stephen Smalley.

18
policy/modules/admin/su.if
View File

@ -90,6 +90,15 @@ template(`su_restricted_domain_template', `
miscfiles_read_localization($1_su_t) miscfiles_read_localization($1_su_t)
ifdef(`distro_redhat',`
# RHEL5 and possibly newer releases incl. Fedora
auth_domtrans_upd_passwd($1_su_t)
optional_policy(`
locallogin_search_keys($1_su_t)
')
')
ifdef(`distro_rhel4',` ifdef(`distro_rhel4',`
domain_role_change_exemption($1_su_t) domain_role_change_exemption($1_su_t)
domain_subj_id_change_exemption($1_su_t) domain_subj_id_change_exemption($1_su_t)
@ -218,6 +227,15 @@ template(`su_role_template',`
userdom_use_user_terminals($1_su_t) userdom_use_user_terminals($1_su_t)
userdom_search_user_home_dirs($1_su_t) userdom_search_user_home_dirs($1_su_t)
ifdef(`distro_redhat',`
# RHEL5 and possibly newer releases incl. Fedora
auth_domtrans_upd_passwd($1_su_t)
optional_policy(`
locallogin_search_keys($1_su_t)
')
')
ifdef(`distro_rhel4',` ifdef(`distro_rhel4',`
domain_role_change_exemption($1_su_t) domain_role_change_exemption($1_su_t)
domain_subj_id_change_exemption($1_su_t) domain_subj_id_change_exemption($1_su_t)

2
policy/modules/admin/su.te
View File

@ -1,5 +1,5 @@
policy_module(su, 1.9.0) policy_module(su, 1.9.1)
######################################## ########################################
# #