rpms/selinux-policy
5
0
Fork 0
Code Issues Pull Requests Releases Activity

Su patch from Dan Walsh.

Browse Source 
dontaudit leaked sockets
This commit is contained in:
Chris PeBenito 2010-06-18 14:32:17 -04:00
parent b9be5cccf1
commit f7e3410aed
2 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
policy/modules/admin/su.if
View File

@ -118,6 +118,11 @@ template(`su_restricted_domain_template', `
userdom_spec_domtrans_unpriv_users($1_su_t)
')
ifdef(`hide_broken_symptoms',`
# dontaudit leaked sockets from parent
dontaudit $1_su_t $2:socket_class_set { read write };
')
optional_policy(`
cron_read_pipes($1_su_t)
')
@ -276,6 +281,11 @@ template(`su_role_template',`
')
')
ifdef(`hide_broken_symptoms',`
# dontaudit leaked sockets from parent
dontaudit $1_su_t $3:socket_class_set { read write };
')
tunable_policy(`allow_polyinstantiation',`
fs_mount_xattr_fs($1_su_t)
fs_unmount_xattr_fs($1_su_t)

2
policy/modules/admin/su.te
View File

@ -1,4 +1,4 @@
policy_module(su, 1.10.0)
policy_module(su, 1.10.1)
########################################
#