rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

add appletalk socket for cups

Browse Source
This commit is contained in:
Chris PeBenito 2006-05-04 20:40:49 +00:00
parent 6ba4d96490
commit f40b22bf42
4 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
refpolicy/policy/flask/access_vectors
View File

@ -607,3 +607,6 @@ class association
# Updated Netlink class for KOBJECT_UEVENT family. # Updated Netlink class for KOBJECT_UEVENT family.
class netlink_kobject_uevent_socket class netlink_kobject_uevent_socket
inherits socket inherits socket
class appletalk_socket
inherits socket

2
refpolicy/policy/flask/security_classes
View File

@ -86,4 +86,6 @@ class association
# Updated Netlink class for KOBJECT_UEVENT family. # Updated Netlink class for KOBJECT_UEVENT family.
class netlink_kobject_uevent_socket class netlink_kobject_uevent_socket
class appletalk_socket
# FLASK # FLASK

3
refpolicy/policy/modules/services/cups.te
View File

@ -84,6 +84,9 @@ allow cupsd_t self:netlink_audit_socket { create_netlink_socket_perms nlmsg_rela
allow cupsd_t self:netlink_route_socket { r_netlink_socket_perms }; allow cupsd_t self:netlink_route_socket { r_netlink_socket_perms };
allow cupsd_t self:tcp_socket { create_stream_socket_perms connectto acceptfrom recvfrom }; allow cupsd_t self:tcp_socket { create_stream_socket_perms connectto acceptfrom recvfrom };
allow cupsd_t self:udp_socket create_socket_perms; allow cupsd_t self:udp_socket create_socket_perms;
allow cupsd_t self:appletalk_socket create_socket_perms;
# generic socket here until appletalk socket is available in kernels
allow cupsd_t self:socket create_socket_perms;
allow cupsd_t cupsd_etc_t:file { r_file_perms setattr }; allow cupsd_t cupsd_etc_t:file { r_file_perms setattr };
allow cupsd_t cupsd_etc_t:dir { rw_dir_perms setattr }; allow cupsd_t cupsd_etc_t:dir { rw_dir_perms setattr };

2
refpolicy/policy/support/obj_perm_sets.spt
View File

@ -28,7 +28,7 @@ define(`devfile_class_set', `{ chr_file blk_file }')
# #
# All socket classes. # All socket classes.
# #
define(`socket_class_set', `{ tcp_socket udp_socket rawip_socket netlink_socket packet_socket unix_stream_socket unix_dgram_socket netlink_route_socket netlink_firewall_socket netlink_tcpdiag_socket netlink_nflog_socket netlink_xfrm_socket netlink_selinux_socket netlink_audit_socket netlink_ip6fw_socket netlink_dnrt_socket netlink_kobject_uevent_socket }') define(`socket_class_set', `{ tcp_socket udp_socket rawip_socket netlink_socket packet_socket unix_stream_socket unix_dgram_socket appletalk_socket netlink_route_socket netlink_firewall_socket netlink_tcpdiag_socket netlink_nflog_socket netlink_xfrm_socket netlink_selinux_socket netlink_audit_socket netlink_ip6fw_socket netlink_dnrt_socket netlink_kobject_uevent_socket }')
# #