rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

raid tools now store pid file and sock_file in /dev/md for early boot.

Browse Source
This commit is contained in:
Dan Walsh 2010-09-09 14:26:32 -04:00
parent 8e47c02b16
commit e81afdf5c9
3 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/kernel/corecommands.fc
View File

@ -154,6 +154,8 @@ ifdef(`distro_gentoo',`
/opt/(.*/)?sbin(/.*)? gen_context(system_u:object_r:bin_t,s0)
/opt/google/talkplugin/cron(/.*)? gen_context(system_u:object_r:bin_t,s0)
/opt/gutenprint/cups/lib/filter(/.*)? gen_context(system_u:object_r:bin_t,s0)
/opt/OpenPrinting-Gutenprint/cups/lib/filter(/.*)? gen_context(system_u:object_r:bin_t,s0)

3
policy/modules/system/raid.fc
View File

@ -1,4 +1,5 @@
/dev/.mdadm.map -- gen_context(system_u:object_r:mdadm_map_t,s0)
/dev/.mdadm\.map -- gen_context(system_u:object_r:mdadm_map_t,s0)
/dev/md(/.*)? gen_context(system_u:object_r:mdadm_var_run_t,s0)
/sbin/mdadm -- gen_context(system_u:object_r:mdadm_exec_t,s0)
/sbin/mdmpd -- gen_context(system_u:object_r:mdadm_exec_t,s0)

3
policy/modules/system/raid.te
View File

@ -15,6 +15,7 @@ files_type(mdadm_map_t)
type mdadm_var_run_t;
files_pid_file(mdadm_var_run_t)
dev_associate(mdadm_var_run_t)
########################################
#
@ -32,7 +33,9 @@ dev_filetrans(mdadm_t, mdadm_map_t, file)
manage_dirs_pattern(mdadm_t, mdadm_var_run_t, mdadm_var_run_t)
manage_files_pattern(mdadm_t, mdadm_var_run_t, mdadm_var_run_t)
manage_sock_files_pattern(mdadm_t, mdadm_var_run_t, mdadm_var_run_t)
files_pid_filetrans(mdadm_t, mdadm_var_run_t, { file dir })
dev_filetrans(mdadm_t, mdadm_var_run_t, { file dir sock_file })
kernel_read_system_state(mdadm_t)
kernel_read_kernel_sysctls(mdadm_t)