rpms/selinux-policy
5
0
Fork 0
Code Issues Pull Requests Releases Activity

fix userdom_create_sysadm_home

Browse Source
This commit is contained in:
Chris PeBenito 2006-02-03 14:48:12 +00:00
parent 1815bad1d7
commit ee9500ec86
2 changed files with 8 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
refpolicy/policy/modules/admin/amanda.te
View File

@ -206,7 +206,7 @@ allow amanda_recover_t amanda_recover_dir_t:file create_file_perms;
allow amanda_recover_t amanda_recover_dir_t:lnk_file create_lnk_perms; allow amanda_recover_t amanda_recover_dir_t:lnk_file create_lnk_perms;
allow amanda_recover_t amanda_recover_dir_t:sock_file create_file_perms; allow amanda_recover_t amanda_recover_dir_t:sock_file create_file_perms;
allow amanda_recover_t amanda_recover_dir_t:fifo_file create_file_perms; allow amanda_recover_t amanda_recover_dir_t:fifo_file create_file_perms;
userdom_create_sysadm_home(amanda_recover_t,amanda_recover_dir_t,{ dir file lnk_file sock_file fifo_file }) userdom_filetrans_sysadm_home_dir(amanda_recover_t,amanda_recover_dir_t,{ dir file lnk_file sock_file fifo_file })
allow amanda_recover_t amanda_tmp_t:dir create_dir_perms; allow amanda_recover_t amanda_tmp_t:dir create_dir_perms;
allow amanda_recover_t amanda_tmp_t:file create_file_perms; allow amanda_recover_t amanda_tmp_t:file create_file_perms;

22
refpolicy/policy/modules/system/userdomain.if
View File

@ -3202,32 +3202,22 @@ interface(`userdom_dontaudit_read_sysadm_home_files',`
## <param name="domain"> ## <param name="domain">
## Domain allowed access. ## Domain allowed access.
## </param> ## </param>
## <param name="object_class" optional="true"> ## <param name="private type">
## The type of the object to be created.
## </param>
## <param name="object_class">
## The class of the object to be created. ## The class of the object to be created.
## If not specified, file is used. ## If not specified, file is used.
## </param> ## </param>
# #
interface(`userdom_create_sysadm_home',` interface(`userdom_filetrans_sysadm_home_dir',`
gen_require(` gen_require(`
type sysadm_home_dir_t, sysadm_home_t; type sysadm_home_dir_t;
') ')
allow $1 sysadm_home_dir_t:dir rw_dir_perms; allow $1 sysadm_home_dir_t:dir rw_dir_perms;
ifelse(`$2',`',`
ifelse(`$3',`',`
type_transition $1 sysadm_home_dir_t:file sysadm_home_t;
',`
type_transition $1 sysadm_home_dir_t:$3 sysadm_home_t;
')
',`
ifelse(`$3',`',`
type_transition $1 sysadm_home_dir_t:file $2;
',`
type_transition $1 sysadm_home_dir_t:$3 $2; type_transition $1 sysadm_home_dir_t:$3 $2;
') ')
')
')
######################################## ########################################
## <summary> ## <summary>