diff --git a/refpolicy/policy/modules/services/rlogin.te b/refpolicy/policy/modules/services/rlogin.te index 11d14aab..ab2d4e9a 100644 --- a/refpolicy/policy/modules/services/rlogin.te +++ b/refpolicy/policy/modules/services/rlogin.te @@ -34,6 +34,7 @@ allow rlogind_t self:netlink_tcpdiag_socket r_netlink_socket_perms; allow rlogind_t self:capability { setuid setgid }; allow rlogind_t rlogind_devpts_t:chr_file { rw_file_perms setattr }; +term_create_pty(rlogind_t,rlogind_devpts_t) # for /usr/lib/telnetlogin can_exec(rlogind_t, rlogind_exec_t) diff --git a/refpolicy/policy/modules/services/rsync.te b/refpolicy/policy/modules/services/rsync.te index 485ddf82..514a3dfc 100644 --- a/refpolicy/policy/modules/services/rsync.te +++ b/refpolicy/policy/modules/services/rsync.te @@ -9,7 +9,7 @@ policy_module(rsync,1.0) type rsync_t; type rsync_exec_t; -inetd_tcp_service_domain(rsync_t,rsync_exec_t) +inetd_service_domain(rsync_t,rsync_exec_t) role system_r types rsync_t; type rsync_data_t; diff --git a/refpolicy/policy/modules/system/hotplug.te b/refpolicy/policy/modules/system/hotplug.te index 253e2b34..666ed228 100644 --- a/refpolicy/policy/modules/system/hotplug.te +++ b/refpolicy/policy/modules/system/hotplug.te @@ -42,6 +42,7 @@ can_exec(hotplug_t,hotplug_etc_t) can_exec(hotplug_t,hotplug_exec_t) allow hotplug_t hotplug_var_run_t:file manage_file_perms; +allow hotplug_t hotplug_var_run_t:dir rw_dir_perms; files_create_pid(hotplug_t,hotplug_var_run_t) kernel_sigchld(hotplug_t) @@ -110,13 +111,12 @@ libs_use_shared_libs(hotplug_t) # Read /usr/lib/gconv/.* libs_read_lib(hotplug_t) -modutils_domtrans_insmod(hotplug_t) -modutils_read_mods_deps(hotplug_t) -miscfiles_read_hwdata(hotplug_t) - miscfiles_read_hwdata(hotplug_t) miscfiles_read_localization(hotplug_t) +modutils_domtrans_insmod(hotplug_t) +modutils_read_mods_deps(hotplug_t) + seutil_dontaudit_search_config(hotplug_t) sysnet_read_config(hotplug_t) diff --git a/refpolicy/policy/modules/system/miscfiles.if b/refpolicy/policy/modules/system/miscfiles.if index 501189ec..b5eec254 100644 --- a/refpolicy/policy/modules/system/miscfiles.if +++ b/refpolicy/policy/modules/system/miscfiles.if @@ -55,7 +55,7 @@ interface(`miscfiles_read_hwdata',` allow $1 hwdata_t:dir r_dir_perms; allow $1 hwdata_t:file r_file_perms; - allow $1 hwdata_t:file { getattr read }; + allow $1 hwdata_t:lnk_file { getattr read }; ') ########################################