Certmaster patch from Dan Walsh.

This commit is contained in:
Chris PeBenito 2009-12-18 10:38:57 -05:00
parent a7d606860b
commit bd21cb1e09

View File

@ -1,5 +1,5 @@
policy_module(certmaster, 1.0.0) policy_module(certmaster, 1.0.1)
######################################## ########################################
# #
@ -26,11 +26,11 @@ type certmaster_var_run_t;
files_pid_file(certmaster_var_run_t) files_pid_file(certmaster_var_run_t)
########################################### ###########################################
# #
# certmaster local policy # certmaster local policy
# #
allow certmaster_t self:capability sys_tty_config; allow certmaster_t self:capability { dac_read_search dac_override sys_tty_config };
allow certmaster_t self:tcp_socket create_stream_socket_perms; allow certmaster_t self:tcp_socket create_stream_socket_perms;
# config files # config files