Certmaster patch from Dan Walsh.
This commit is contained in:
parent
a7d606860b
commit
bd21cb1e09
@ -1,5 +1,5 @@
|
|||||||
|
|
||||||
policy_module(certmaster, 1.0.0)
|
policy_module(certmaster, 1.0.1)
|
||||||
|
|
||||||
########################################
|
########################################
|
||||||
#
|
#
|
||||||
@ -30,7 +30,7 @@ files_pid_file(certmaster_var_run_t)
|
|||||||
# certmaster local policy
|
# certmaster local policy
|
||||||
#
|
#
|
||||||
|
|
||||||
allow certmaster_t self:capability sys_tty_config;
|
allow certmaster_t self:capability { dac_read_search dac_override sys_tty_config };
|
||||||
allow certmaster_t self:tcp_socket create_stream_socket_perms;
|
allow certmaster_t self:tcp_socket create_stream_socket_perms;
|
||||||
|
|
||||||
# config files
|
# config files
|
||||||
|
Loading…
Reference in New Issue
Block a user