[selinux-policy: 1546/3172] add access to keys for unconfined

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 21:18:51 UTC 2010


commit d8226758509bcedc48d10b02bec191266f85bd76
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Fri Jul 14 13:11:42 2006 +0000

    add access to keys for unconfined

 policy/modules/kernel/domain.te |    5 ++++-
 1 files changed, 4 insertions(+), 1 deletions(-)
---
diff --git a/policy/modules/kernel/domain.te b/policy/modules/kernel/domain.te
index f0e07f2..31550e1 100644
--- a/policy/modules/kernel/domain.te
+++ b/policy/modules/kernel/domain.te
@@ -1,5 +1,5 @@
 
-policy_module(domain,1.1.3)
+policy_module(domain,1.1.4)
 
 ########################################
 #
@@ -141,3 +141,6 @@ allow unconfined_domain_type domain:msg { send receive };
 allow unconfined_domain_type domain:dir r_dir_perms;
 allow unconfined_domain_type domain:file r_file_perms;
 allow unconfined_domain_type domain:lnk_file r_file_perms;
+
+# act on all domains keys
+allow unconfined_domain_type domain:key *;


More information about the scm-commits mailing list