rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Allow smbd_t sys_admin capability so samba can change quota on users.

Browse Source
This commit is contained in:
Dan Walsh 2010-10-07 09:31:35 -04:00
parent 7ed755ab8b
commit b3e7610270
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/services/samba.te
View File

@ -227,7 +227,7 @@ optional_policy(`
# #
# smbd Local policy # smbd Local policy
# #
allow smbd_t self:capability { chown fowner kill setgid setuid sys_nice sys_resource lease dac_override dac_read_search }; allow smbd_t self:capability { chown fowner kill setgid setuid sys_nice sys_admin sys_resource lease dac_override dac_read_search };
dontaudit smbd_t self:capability sys_tty_config; dontaudit smbd_t self:capability sys_tty_config;
allow smbd_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap }; allow smbd_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap };
allow smbd_t self:process setrlimit; allow smbd_t self:process setrlimit;