rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

- Allow openoffice execstack/execmem privs

Browse Source
This commit is contained in:
Daniel J Walsh 2008-10-28 20:06:14 +00:00
parent a3e038c1a1
commit d8e5d05b6e
4 changed files with 668 additions and 583 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
booleans-minimum.conf
View File

@ -8,7 +8,7 @@ allow_execmod = false
# Allow making the stack executable via mprotect.Also requires allow_execmem. # Allow making the stack executable via mprotect.Also requires allow_execmem.
# #
allow_execstack = false allow_execstack = true
# Allow ftpd to read cifs directories. # Allow ftpd to read cifs directories.
# #

2
booleans-targeted.conf
View File

@ -8,7 +8,7 @@ allow_execmod = false
# Allow making the stack executable via mprotect.Also requires allow_execmem. # Allow making the stack executable via mprotect.Also requires allow_execmem.
# #
allow_execstack = false allow_execstack = true
# Allow ftpd to read cifs directories. # Allow ftpd to read cifs directories.
# #

1234
policy-20080710.patch
View File

File diff suppressed because it is too large Load Diff

13
selinux-policy.spec
View File

@ -323,15 +323,10 @@ SELinux Reference policy targeted base module.
%post targeted %post targeted
if [ $1 -eq 1 ]; then if [ $1 -eq 1 ]; then
%loadpolicy targeted %loadpolicy targeted
semanage -S targeted -i - << __eof #semanage -S targeted -i - << __eof
user -a -P user -R "unconfined_r system_r" -r s0-s0:c0.c1023 unconfined_u #login -m -s unconfined_u -r s0-s0:c0.c1023 __default__
user -a -P user -R guest_r guest_u #login -m -s unconfined_u -r s0-s0:c0.c1023 root
user -a -P user -R xguest_r xguest_u #__eof
__eof
semanage -S targeted -i - << __eof
login -m -s unconfined_u -r s0-s0:c0.c1023 __default__
login -m -s unconfined_u -r s0-s0:c0.c1023 root
__eof
restorecon -R /root /var/log /var/run 2> /dev/null restorecon -R /root /var/log /var/run 2> /dev/null
else else
semodule -s targeted -r moilscanner 2>/dev/null semodule -s targeted -r moilscanner 2>/dev/null