rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Kismet and tzdata patches from Dan Walsh.

Browse Source
This commit is contained in:
Chris PeBenito 2009-11-25 15:12:52 -05:00
parent 0cad9a734e
commit d913e793ae
3 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/admin/kismet.fc
View File

@ -1,3 +1,5 @@
HOME_DIR/\.kismet(/.*)? gen_context(system_u:object_r:kismet_home_t,s0)
/usr/bin/kismet -- gen_context(system_u:object_r:kismet_exec_t,s0) /usr/bin/kismet -- gen_context(system_u:object_r:kismet_exec_t,s0)
/var/lib/kismet(/.*)? gen_context(system_u:object_r:kismet_var_lib_t,s0) /var/lib/kismet(/.*)? gen_context(system_u:object_r:kismet_var_lib_t,s0)
/var/log/kismet(/.*)? gen_context(system_u:object_r:kismet_log_t,s0) /var/log/kismet(/.*)? gen_context(system_u:object_r:kismet_log_t,s0)

10
policy/modules/admin/kismet.te
View File

@ -1,5 +1,5 @@
policy_module(kismet, 1.4.0) policy_module(kismet, 1.4.1)
######################################## ########################################
# #
@ -11,6 +11,9 @@ type kismet_exec_t;
application_domain(kismet_t, kismet_exec_t) application_domain(kismet_t, kismet_exec_t)
role system_r types kismet_t; role system_r types kismet_t;
type kismet_home_t;
userdom_user_home_content(kismet_home_t)
type kismet_log_t; type kismet_log_t;
logging_log_file(kismet_log_t) logging_log_file(kismet_log_t)
@ -39,6 +42,11 @@ allow kismet_t self:unix_dgram_socket { create_socket_perms sendto };
allow kismet_t self:unix_stream_socket create_stream_socket_perms; allow kismet_t self:unix_stream_socket create_stream_socket_perms;
allow kismet_t self:tcp_socket create_stream_socket_perms; allow kismet_t self:tcp_socket create_stream_socket_perms;
manage_dirs_pattern(kismet_t, kismet_home_t, kismet_home_t)
manage_files_pattern(kismet_t, kismet_home_t, kismet_home_t)
manage_lnk_files_pattern(kismet_t, kismet_home_t, kismet_home_t)
userdom_user_home_dir_filetrans(kismet_t, kismet_home_t, { file dir })
manage_files_pattern(kismet_t, kismet_log_t, kismet_log_t) manage_files_pattern(kismet_t, kismet_log_t, kismet_log_t)
allow kismet_t kismet_log_t:dir setattr; allow kismet_t kismet_log_t:dir setattr;
logging_log_filetrans(kismet_t, kismet_log_t, { file dir }) logging_log_filetrans(kismet_t, kismet_log_t, { file dir })

2
policy/modules/admin/tzdata.te
View File

@ -19,6 +19,8 @@ application_domain(tzdata_t, tzdata_exec_t)
files_read_etc_files(tzdata_t) files_read_etc_files(tzdata_t)
files_search_spool(tzdata_t) files_search_spool(tzdata_t)
fs_getattr_xattr_fs(tzdata_t)
term_dontaudit_list_ptys(tzdata_t) term_dontaudit_list_ptys(tzdata_t)
locallogin_dontaudit_use_fds(tzdata_t) locallogin_dontaudit_use_fds(tzdata_t)