rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

fix up entrypoints

Browse Source
This commit is contained in:
Chris PeBenito 2006-05-01 19:11:54 +00:00
parent 27881870eb
commit d40c0ecf7a
5 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
refpolicy/policy/modules/apps/games.if
View File

@ -41,6 +41,7 @@ template(`games_per_userdomain_template',`
type $1_games_t;
domain_type($1_games_t)
domain_entry_file($1_games_t,games_exec_t)
role $3 types $1_games_t;
type $1_games_devpts_t;

1
refpolicy/policy/modules/apps/java.if
View File

@ -44,6 +44,7 @@ template(`java_per_userdomain_template',`
type $1_javaplugin_t;
domain_type($1_javaplugin_t)
domain_entry_file($1_javaplugin_t,java_exec_t)
role $3 types $1_javaplugin_t;
type $1_javaplugin_tmp_t;

6
refpolicy/policy/modules/services/dbus.if
View File

@ -49,11 +49,6 @@ interface(`dbus_stub',`
## </param>
#
template(`dbus_per_userdomain_template',`
gen_require(`
type system_dbusd_t, dbusd_etc_t;
type system_dbusd_exec_t;
class dbus { send_msg acquire_svc };
')
##############################
#
@ -61,6 +56,7 @@ template(`dbus_per_userdomain_template',`
#
type $1_dbusd_t;
domain_type($1_dbusd_t)
domain_entry_file($1_dbusd_t,system_dbusd_exec_t)
role $3 types $1_dbusd_t;
type $1_dbusd_$1_t;

1
refpolicy/policy/modules/system/ipsec.te
View File

@ -26,6 +26,7 @@ files_pid_file(ipsec_var_run_t)
type ipsec_mgmt_t;
type ipsec_mgmt_exec_t;
init_system_domain(ipsec_mgmt_t,ipsec_mgmt_exec_t)
corecmd_shell_entry_type(ipsec_mgmt_t)
role system_r types ipsec_mgmt_t;
type ipsec_mgmt_lock_t;

4
refpolicy/policy/modules/system/userdomain.if
View File

@ -31,6 +31,8 @@ template(`base_user_template',`
type $1_t, userdomain;
domain_type($1_t)
corecmd_shell_entry_type($1_t)
corecmd_bin_entry_type($1_t)
corecmd_sbin_entry_type($1_t)
domain_user_exemption_target($1_t)
role $1_r types $1_t;
allow system_r $1_r;
@ -105,7 +107,7 @@ template(`base_user_template',`
can_exec($1_t,$1_home_t)
# full control of the home directory
allow $1_t $1_home_t:file { create_file_perms relabelfrom relabelto };
allow $1_t $1_home_t:file { create_file_perms relabelfrom relabelto entrypoint };
allow $1_t $1_home_t:lnk_file { create_lnk_perms relabelfrom relabelto };
allow $1_t $1_home_t:dir { create_dir_perms relabelfrom relabelto };
allow $1_t $1_home_t:sock_file { create_file_perms relabelfrom relabelto };