rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Allow firewallgui to sys_rawio which seems to be required to setup masqerading

Browse Source 
Allow all domains to search through default_t directories, in order to find differnet labels.  For example people serring up /foo/bar to be share via samba.
Add label for /var/log/slim.log
This commit is contained in:
Dan Walsh 2010-09-25 06:23:04 -04:00
parent f7307c60ba
commit fb52482a1f
3 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
policy/modules/apps/firewallgui.te
View File

@ -17,8 +17,7 @@ files_tmp_file(firewallgui_tmp_t)
# firewallgui local policy
#
allow firewallgui_t self:capability net_admin;
allow firewallgui_t self:capability { net_admin sys_rawio } ;
allow firewallgui_t self:fifo_file rw_fifo_file_perms;
manage_files_pattern(firewallgui_t,firewallgui_tmp_t,firewallgui_tmp_t)

3
policy/modules/kernel/domain.te
View File

@ -121,6 +121,9 @@ term_use_controlling_term(domain)
# list the root directory
files_list_root(domain)
# allow all domains to search through default_t directory, since users sometimes
# place labels within these directories. (samba_share_t) for example.
files_search_default(domain)
# All executables should be able to search the directory they are in
corecmd_search_bin(domain)

1
policy/modules/services/xserver.fc
View File

@ -106,6 +106,7 @@ ifdef(`distro_debian', `
/var/cache/gdm(/.*)? gen_context(system_u:object_r:xdm_var_lib_t,s0)
/var/log/gdm(/.*)? gen_context(system_u:object_r:xdm_log_t,s0)
/var/log/slim\.log.* -- gen_context(system_u:object_r:xdm_log_t,s0)
/var/log/lxdm\.log.* -- gen_context(system_u:object_r:xdm_log_t,s0)
/var/log/[kw]dm\.log.* -- gen_context(system_u:object_r:xserver_log_t,s0)
/var/log/XFree86.* -- gen_context(system_u:object_r:xserver_log_t,s0)