rpms/selinux-policy
6
0
Fork 0
Code Issues Pull Requests Releases Activity

Allow a couple of sandbox issues.

Browse Source 
Remove postgresl managing of etc_files, until I find out why it is needed.
Dontaudit leaks from rpm to mount
This commit is contained in:
Dan Walsh 2010-09-14 10:02:43 -04:00
parent 4251ae1004
commit c2dae98501
3 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
policy/modules/apps/sandbox.te
View File

@ -262,6 +262,13 @@ optional_policy(`
hal_dbus_chat(sandbox_x_client_t) hal_dbus_chat(sandbox_x_client_t)
') ')
allow sandbox_web_t self:process setsched;
optional_policy(`
nsplugin_read_rw_files(sandbox_web_t)
')
######################################## ########################################
# #
# sandbox_web_client_t local policy # sandbox_web_client_t local policy

3
policy/modules/services/postgresql.te
View File

@ -251,8 +251,7 @@ domain_dontaudit_list_all_domains_state(postgresql_t)
domain_use_interactive_fds(postgresql_t) domain_use_interactive_fds(postgresql_t)
files_dontaudit_search_home(postgresql_t) files_dontaudit_search_home(postgresql_t)
files_manage_etc_files(postgresql_t) files_read_etc_files(postgresql_t)
files_search_etc(postgresql_t)
files_read_etc_runtime_files(postgresql_t) files_read_etc_runtime_files(postgresql_t)
files_read_usr_files(postgresql_t) files_read_usr_files(postgresql_t)

1
policy/modules/system/mount.te
View File

@ -283,6 +283,7 @@ optional_policy(`
# for kernel package installation # for kernel package installation
optional_policy(` optional_policy(`
rpm_rw_pipes(mount_t) rpm_rw_pipes(mount_t)
rpm_dontaudit_leaks(mount_t)
') ')
optional_policy(` optional_policy(`