trunk: add context contains to setrans.
This commit is contained in:
parent
7722c29e88
commit
c1e501136b
@ -1,5 +1,9 @@
|
|||||||
|
|
||||||
policy_module(setrans, 1.5.0)
|
policy_module(setrans, 1.5.1)
|
||||||
|
|
||||||
|
gen_require(`
|
||||||
|
class context contains;
|
||||||
|
')
|
||||||
|
|
||||||
########################################
|
########################################
|
||||||
#
|
#
|
||||||
@ -35,6 +39,7 @@ allow setrans_t self:process { setrlimit getcap setcap signal_perms };
|
|||||||
allow setrans_t self:unix_stream_socket create_stream_socket_perms;
|
allow setrans_t self:unix_stream_socket create_stream_socket_perms;
|
||||||
allow setrans_t self:unix_dgram_socket create_socket_perms;
|
allow setrans_t self:unix_dgram_socket create_socket_perms;
|
||||||
allow setrans_t self:netlink_selinux_socket create_socket_perms;
|
allow setrans_t self:netlink_selinux_socket create_socket_perms;
|
||||||
|
allow setrans_t self:context contains;
|
||||||
|
|
||||||
can_exec(setrans_t, setrans_exec_t)
|
can_exec(setrans_t, setrans_exec_t)
|
||||||
corecmd_search_bin(setrans_t)
|
corecmd_search_bin(setrans_t)
|
||||||
|
Loading…
Reference in New Issue
Block a user