rpms/selinux-policy
5
0
Fork 0
Code Issues Pull Requests Releases Activity

trunk: Misc fixes for unix_update from Brandon Whalen.

Browse Source
This commit is contained in:
Chris PeBenito 2009-06-18 13:36:40 +00:00
parent 95ea7d6986
commit df28a0c444
2 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
Changelog
View File

@ -1,3 +1,4 @@
- Misc fixes for unix_update from Brandon Whalen.
- Add x_device permissions for XI2 functions, from Eamon Walsh. - Add x_device permissions for XI2 functions, from Eamon Walsh.
- MLS constraints for the x_selection class, from Eamon Walsh. - MLS constraints for the x_selection class, from Eamon Walsh.
- Postgresql updates from KaiGai Kohei. - Postgresql updates from KaiGai Kohei.

6
policy/modules/system/authlogin.te
View File

@ -1,5 +1,5 @@
policy_module(authlogin, 2.0.1) policy_module(authlogin, 2.0.2)
######################################## ########################################
# #
@ -60,6 +60,7 @@ type updpwd_t;
type updpwd_exec_t; type updpwd_exec_t;
domain_type(updpwd_t) domain_type(updpwd_t)
domain_entry_file(updpwd_t,updpwd_exec_t) domain_entry_file(updpwd_t,updpwd_exec_t)
domain_obj_id_change_exemption(updpwd_t)
role system_r types updpwd_t; role system_r types updpwd_t;
type utempter_t; type utempter_t;
@ -309,6 +310,7 @@ optional_policy(`
# updpwd local policy # updpwd local policy
# #
allow updpwd_t self:capability { chown dac_override };
allow updpwd_t self:process setfscreate; allow updpwd_t self:process setfscreate;
allow updpwd_t self:fifo_file rw_fifo_file_perms; allow updpwd_t self:fifo_file rw_fifo_file_perms;
allow updpwd_t self:unix_stream_socket create_stream_socket_perms; allow updpwd_t self:unix_stream_socket create_stream_socket_perms;
@ -316,6 +318,8 @@ allow updpwd_t self:unix_dgram_socket create_socket_perms;
kernel_read_system_state(updpwd_t) kernel_read_system_state(updpwd_t)
dev_read_urand(updpwd_t)
files_manage_etc_files(updpwd_t) files_manage_etc_files(updpwd_t)
term_dontaudit_use_console(updpwd_t) term_dontaudit_use_console(updpwd_t)