Certmaster patch from Dan Walsh.
This commit is contained in:
parent
a7d606860b
commit
bd21cb1e09
@ -1,5 +1,5 @@
|
|||||||
|
|
||||||
policy_module(certmaster, 1.0.0)
|
policy_module(certmaster, 1.0.1)
|
||||||
|
|
||||||
########################################
|
########################################
|
||||||
#
|
#
|
||||||
@ -26,11 +26,11 @@ type certmaster_var_run_t;
|
|||||||
files_pid_file(certmaster_var_run_t)
|
files_pid_file(certmaster_var_run_t)
|
||||||
|
|
||||||
###########################################
|
###########################################
|
||||||
#
|
#
|
||||||
# certmaster local policy
|
# certmaster local policy
|
||||||
#
|
#
|
||||||
|
|
||||||
allow certmaster_t self:capability sys_tty_config;
|
allow certmaster_t self:capability { dac_read_search dac_override sys_tty_config };
|
||||||
allow certmaster_t self:tcp_socket create_stream_socket_perms;
|
allow certmaster_t self:tcp_socket create_stream_socket_perms;
|
||||||
|
|
||||||
# config files
|
# config files
|
||||||
|
Loading…
Reference in New Issue
Block a user