rpms/selinux-policy
5
0
Fork 0
Code Issues Pull Requests Releases Activity

Use stream connect pattern.

Browse Source 
Use stream_connect_pattern.

Use stream_connect_pattern.

Use stream_connect_pattern.

Signed-off-by: Dominick Grift <domg472@gmail.com>
This commit is contained in:
Dominick Grift 2010-09-15 13:30:49 +02:00
parent ad424545db
commit ac13ad949b
4 changed files with 5 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
policy/modules/services/postgresql.if
View File

@ -312,10 +312,8 @@ interface(`postgresql_stream_connect',`
')
files_search_pids($1)
allow $1 postgresql_t:unix_stream_socket connectto;
allow $1 postgresql_var_run_t:sock_file write;
# Some versions of postgresql put the sock file in /tmp
allow $1 postgresql_tmp_t:sock_file write;
files_search_tmp($1)
stream_connect_pattern($1, { postgresql_var_run_t postgresql_tmp_t}, { postgresql_var_run_t postgresql_tmp_t}, postgresql_t)
')
########################################

3
policy/modules/services/resmgr.if
View File

@ -16,7 +16,6 @@ interface(`resmgr_stream_connect',`
type resmgrd_var_run_t, resmgrd_t;
')
allow $1 resmgrd_t:unix_stream_socket connectto;
allow $1 resmgrd_var_run_t:sock_file { getattr write };
files_search_pids($1)
stream_connect_pattern($1, resmgrd_var_run_t, resmgrd_var_run_t, resmgrd_t)
')

3
policy/modules/services/ricci.if
View File

@ -108,8 +108,7 @@ interface(`ricci_stream_connect_modclusterd',`
')
files_search_pids($1)
allow $1 ricci_modcluster_var_run_t:sock_file write;
allow $1 ricci_modclusterd_t:unix_stream_socket connectto;
stream_connect_pattern($1, ricci_modcluster_var_run_t, ricci_modcluster_var_run_t, ricci_modclusterd_t)
')
########################################

3
policy/modules/services/rpcbind.if
View File

@ -34,8 +34,7 @@ interface(`rpcbind_stream_connect',`
')
files_search_pids($1)
allow $1 rpcbind_var_run_t:sock_file write;
allow $1 rpcbind_t:unix_stream_socket connectto;
stream_connect_pattern($1, rpcbind_var_run_t, rpcbind_var_run_t, rpcbind_t)
')
########################################