[selinux-policy: 1693/3172] patch from dan to have ricci modstorage transition to lvm
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 21:31:21 UTC 2010
commit 19fd9301e6f21b3e94a85c8dad95d569281319e5
Author: Chris PeBenito <cpebenito at tresys.com>
Date: Wed Mar 21 20:02:50 2007 +0000
patch from dan to have ricci modstorage transition to lvm
policy/modules/services/ricci.te | 7 ++++++-
1 files changed, 6 insertions(+), 1 deletions(-)
---
diff --git a/policy/modules/services/ricci.te b/policy/modules/services/ricci.te
index 695bbb5..acba016 100644
--- a/policy/modules/services/ricci.te
+++ b/policy/modules/services/ricci.te
@@ -1,5 +1,5 @@
-policy_module(ricci,1.0.3)
+policy_module(ricci,1.0.4)
########################################
#
@@ -445,6 +445,7 @@ optional_policy(`
#
allow ricci_modstorage_t self:process { setsched signal };
+dontaudit ricci_modstorage_t self:process ptrace;
allow ricci_modstorage_t self:capability { mknod sys_nice };
allow ricci_modstorage_t self:fifo_file rw_fifo_file_perms;
allow ricci_modstorage_t self:unix_dgram_socket create_socket_perms;
@@ -494,6 +495,10 @@ optional_policy(`
')
optional_policy(`
+ lvm_domtrans(ricci_modstorage_t)
+')
+
+optional_policy(`
nscd_socket_use(ricci_modstorage_t)
')
More information about the scm-commits
mailing list