From d7b98c890234a02afeec85abd70375145d1e9100 Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Fri, 18 Dec 2009 10:39:23 -0500 Subject: [PATCH] GPM patch from Dan Walsh. --- policy/modules/services/gpm.te | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/policy/modules/services/gpm.te b/policy/modules/services/gpm.te index e62fbe02..902b243b 100644 --- a/policy/modules/services/gpm.te +++ b/policy/modules/services/gpm.te @@ -1,5 +1,5 @@ -policy_module(gpm, 1.7.0) +policy_module(gpm, 1.7.1) ######################################## # @@ -27,7 +27,8 @@ files_type(gpmctl_t) # Local policy # -allow gpm_t self:capability { setuid dac_override sys_admin sys_tty_config }; +allow gpm_t self:capability { setpcap setuid dac_override sys_admin sys_tty_config }; +allow gpm_t self:process { getcap setcap }; allow gpm_t self:unix_stream_socket create_stream_socket_perms; allow gpm_t gpm_conf_t:dir list_dir_perms;