From e21162e4711ef28736c4dfcd34c4bc318b097064 Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Wed, 25 Nov 2009 10:04:40 -0500 Subject: [PATCH] Kdump reads the kernel core. --- policy/modules/kernel/kernel.if | 1 + policy/modules/kernel/kernel.te | 2 +- policy/modules/system/kdump.te | 3 ++- 3 files changed, 4 insertions(+), 2 deletions(-) diff --git a/policy/modules/kernel/kernel.if b/policy/modules/kernel/kernel.if index f8fad776..8a970d5f 100644 --- a/policy/modules/kernel/kernel.if +++ b/policy/modules/kernel/kernel.if @@ -974,6 +974,7 @@ interface(`kernel_read_core_if',` attribute can_dump_kernel; ') + allow $1 self:capability sys_rawio; read_files_pattern($1, proc_t, proc_kcore_t) list_dirs_pattern($1, proc_t, proc_t) diff --git a/policy/modules/kernel/kernel.te b/policy/modules/kernel/kernel.te index 42a4d056..400bee58 100644 --- a/policy/modules/kernel/kernel.te +++ b/policy/modules/kernel/kernel.te @@ -1,5 +1,5 @@ -policy_module(kernel, 1.11.1) +policy_module(kernel, 1.11.2) ######################################## # diff --git a/policy/modules/system/kdump.te b/policy/modules/system/kdump.te index a5a75262..fe642788 100644 --- a/policy/modules/system/kdump.te +++ b/policy/modules/system/kdump.te @@ -1,5 +1,5 @@ -policy_module(kdump, 1.0.0) +policy_module(kdump, 1.0.1) ####################################### # @@ -29,6 +29,7 @@ files_read_etc_runtime_files(kdump_t) files_read_kernel_img(kdump_t) kernel_read_system_state(kdump_t) +kernel_read_core_if(kdump_t) dev_read_framebuffer(kdump_t) dev_read_sysfs(kdump_t)