[selinux-policy: 1125/3172] hopefuly final fix for run_init

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 20:42:18 UTC 2010


commit a49e2bd36eb3b8028d060b830be7e9347053e8b1
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Thu Jan 19 14:17:26 2006 +0000

    hopefuly final fix for run_init

 refpolicy/policy/modules/system/selinuxutil.if |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)
---
diff --git a/refpolicy/policy/modules/system/selinuxutil.if b/refpolicy/policy/modules/system/selinuxutil.if
index fa906c6..a4a2f45 100644
--- a/refpolicy/policy/modules/system/selinuxutil.if
+++ b/refpolicy/policy/modules/system/selinuxutil.if
@@ -368,12 +368,13 @@ interface(`seutil_domtrans_runinit',`
 interface(`seutil_run_runinit',`
 	gen_require(`
 		type run_init_t;
-		class chr_file rw_term_perms;
+		role system_r;
 	')
 
 	seutil_domtrans_runinit($1)
 	role $2 types run_init_t;
 	allow run_init_t $3:chr_file rw_term_perms;
+	allow $2 system_r;
 ')
 
 ########################################


More information about the scm-commits mailing list