[selinux-policy: 1643/3172] patch from dan for some missing gen_require()s

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 21:27:07 UTC 2010


commit 563e58e863870c1e71538fd1e71a02985aadb403
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Wed Nov 29 13:44:40 2006 +0000

    patch from dan for some missing gen_require()s

 policy/modules/apps/mozilla.if      |    5 ++++-
 policy/modules/services/xserver.if  |    8 ++++++++
 policy/modules/system/userdomain.if |    9 +++++++++
 3 files changed, 21 insertions(+), 1 deletions(-)
---
diff --git a/policy/modules/apps/mozilla.if b/policy/modules/apps/mozilla.if
index 06b220f..6f6f6a4 100644
--- a/policy/modules/apps/mozilla.if
+++ b/policy/modules/apps/mozilla.if
@@ -33,7 +33,10 @@
 ## </param>
 #
 template(`mozilla_per_role_template',`
-	
+	gen_require(`
+		type mozilla_conf_t, mozilla_exec_t;
+	')
+
 	########################################
 	#
 	# Declarations
diff --git a/policy/modules/services/xserver.if b/policy/modules/services/xserver.if
index db6a010..f5c79d6 100644
--- a/policy/modules/services/xserver.if
+++ b/policy/modules/services/xserver.if
@@ -13,6 +13,9 @@
 ## </param>
 #
 template(`xserver_common_domain_template',`
+	gen_require(`
+		type xkb_var_lib_t, xserver_exec_t, xserver_log_t;
+	')
 
 	##############################
 	#
@@ -222,6 +225,11 @@ template(`xserver_common_domain_template',`
 #
 template(`xserver_per_role_template',`
 
+	gen_require(`
+		type iceauth_exec_t, xauth_exec_t;
+		attribute fonts_type, fonts_cache_type, fonts_config_type;
+	')
+
 	##############################
 	#
 	# Declarations
diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if
index c47a891..96002f0 100644
--- a/policy/modules/system/userdomain.if
+++ b/policy/modules/system/userdomain.if
@@ -639,6 +639,9 @@ template(`userdom_role_change_template',`
 ## </param>
 #
 template(`userdom_common_user_template',`
+	gen_require(`
+		attribute unpriv_userdomain;
+	')
 
 	userdom_base_user_template($1)
 
@@ -899,6 +902,11 @@ template(`userdom_common_user_template',`
 ## </param>
 #
 template(`userdom_unpriv_user_template', `
+
+	gen_require(`
+		attribute privhome, user_ptynode, user_home_dir_type, user_home_type, user_tmpfile, user_ttynode;
+	')
+
 	##############################
 	#
 	# Declarations
@@ -1033,6 +1041,7 @@ template(`userdom_unpriv_user_template', `
 #
 template(`userdom_admin_user_template',`
 	gen_require(`
+		attribute admin_terminal, privhome;
 		class passwd { passwd chfn chsh rootok crontab };
 	')
 


More information about the scm-commits mailing list