[selinux-policy: 1693/3172] patch from dan to have ricci modstorage transition to lvm

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 21:31:21 UTC 2010


commit 19fd9301e6f21b3e94a85c8dad95d569281319e5
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Wed Mar 21 20:02:50 2007 +0000

    patch from dan to have ricci modstorage transition to lvm

 policy/modules/services/ricci.te |    7 ++++++-
 1 files changed, 6 insertions(+), 1 deletions(-)
---
diff --git a/policy/modules/services/ricci.te b/policy/modules/services/ricci.te
index 695bbb5..acba016 100644
--- a/policy/modules/services/ricci.te
+++ b/policy/modules/services/ricci.te
@@ -1,5 +1,5 @@
 
-policy_module(ricci,1.0.3)
+policy_module(ricci,1.0.4)
 
 ########################################
 #
@@ -445,6 +445,7 @@ optional_policy(`
 #
 
 allow ricci_modstorage_t self:process { setsched signal };
+dontaudit ricci_modstorage_t self:process ptrace;
 allow ricci_modstorage_t self:capability { mknod sys_nice };
 allow ricci_modstorage_t self:fifo_file rw_fifo_file_perms;
 allow ricci_modstorage_t self:unix_dgram_socket create_socket_perms;
@@ -494,6 +495,10 @@ optional_policy(`
 ')
 
 optional_policy(`
+	lvm_domtrans(ricci_modstorage_t)
+')
+
+optional_policy(`
 	nscd_socket_use(ricci_modstorage_t)
 ')
 


More information about the scm-commits mailing list