rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Additional kdumpgui cleanup.

Browse Source
This commit is contained in:
Chris PeBenito 2010-08-10 09:21:01 -04:00
parent 46fc0d39e3
commit a9539a063b
3 changed files with 5 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
Changelog
View File

@ -7,6 +7,7 @@
- Added modules: - Added modules:
accountsd (Dan Walsh) accountsd (Dan Walsh)
cgroup (Dominick Grift) cgroup (Dominick Grift)
kdumpgui (Dan Walsh)
livecd (Dan Walsh) livecd (Dan Walsh)
mojomojo (Lain Arnell) mojomojo (Lain Arnell)
sambagui (Dan Walsh) sambagui (Dan Walsh)

2
policy/modules/apps/kdumpgui.fc
View File

@ -1 +1 @@
/usr/share/system-config-kdump/system-config-kdump-backend.py -- gen_context(system_u:object_r:kdumpgui_exec_t,s0) /usr/share/system-config-kdump/system-config-kdump-backend\.py -- gen_context(system_u:object_r:kdumpgui_exec_t,s0)

10
policy/modules/apps/kdumpgui.te
View File

@ -7,7 +7,6 @@ policy_module(kdumpgui, 1.0.0)
type kdumpgui_t; type kdumpgui_t;
type kdumpgui_exec_t; type kdumpgui_exec_t;
dbus_system_domain(kdumpgui_t, kdumpgui_exec_t) dbus_system_domain(kdumpgui_t, kdumpgui_exec_t)
###################################### ######################################
@ -15,9 +14,7 @@ dbus_system_domain(kdumpgui_t, kdumpgui_exec_t)
# system-config-kdump local policy # system-config-kdump local policy
# #
allow kdumpgui_t self:capability { net_admin sys_admin sys_rawio };
allow kdumpgui_t self:fifo_file rw_fifo_file_perms; allow kdumpgui_t self:fifo_file rw_fifo_file_perms;
allow kdumpgui_t self:netlink_kobject_uevent_socket create_socket_perms; allow kdumpgui_t self:netlink_kobject_uevent_socket create_socket_perms;
kernel_read_system_state(kdumpgui_t) kernel_read_system_state(kdumpgui_t)
@ -29,14 +26,13 @@ corecmd_exec_shell(kdumpgui_t)
dev_dontaudit_getattr_all_chr_files(kdumpgui_t) dev_dontaudit_getattr_all_chr_files(kdumpgui_t)
dev_read_sysfs(kdumpgui_t) dev_read_sysfs(kdumpgui_t)
# for blkid.tab
files_manage_etc_runtime_files(kdumpgui_t)
files_etc_filetrans_etc_runtime(kdumpgui_t, file)
files_manage_boot_files(kdumpgui_t) files_manage_boot_files(kdumpgui_t)
files_manage_boot_symlinks(kdumpgui_t) files_manage_boot_symlinks(kdumpgui_t)
# Needed for running chkconfig # Needed for running chkconfig
files_manage_etc_symlinks(kdumpgui_t) files_manage_etc_symlinks(kdumpgui_t)
# for blkid.tab
files_manage_etc_runtime_files(kdumpgui_t)
files_etc_filetrans_etc_runtime(kdumpgui_t, file)
storage_raw_read_fixed_disk(kdumpgui_t) storage_raw_read_fixed_disk(kdumpgui_t)
storage_raw_write_fixed_disk(kdumpgui_t) storage_raw_write_fixed_disk(kdumpgui_t)