[selinux-policy: 2013/3172] trunk: add interface to transition to initrc_t on labeled init scripts.
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 21:58:49 UTC 2010
commit 64c5b9975bfd61c8175e4aa42f0cd70d138fab57
Author: Chris PeBenito <cpebenito at tresys.com>
Date: Thu Sep 18 13:47:43 2008 +0000
trunk: add interface to transition to initrc_t on labeled init scripts.
policy/modules/system/init.if | 25 +++++++++++++++++++++++++
policy/modules/system/init.te | 2 +-
2 files changed, 26 insertions(+), 1 deletions(-)
---
diff --git a/policy/modules/system/init.if b/policy/modules/system/init.if
index e6e831c..a7db5fe 100644
--- a/policy/modules/system/init.if
+++ b/policy/modules/system/init.if
@@ -695,6 +695,31 @@ interface(`init_script_file_domtrans',`
########################################
## <summary>
+## Transition to the init script domain
+## on a specified labeled init script.
+## </summary>
+## <param name="domain">
+## <summary>
+## Domain allowed access.
+## </summary>
+## </param>
+## <param name="init_script_file">
+## <summary>
+## Labeled init script file.
+## </summary>
+## </param>
+#
+interface(`init_labeled_script_domtrans',`
+ gen_require(`
+ type initrc_t;
+ ')
+
+ domtrans_pattern($1, $2, initrc_t)
+ files_search_etc($1)
+')
+
+########################################
+## <summary>
## Start and stop daemon programs directly.
## </summary>
## <desc>
diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te
index 751a0f7..3e03dac 100644
--- a/policy/modules/system/init.te
+++ b/policy/modules/system/init.te
@@ -1,5 +1,5 @@
-policy_module(init, 1.11.3)
+policy_module(init, 1.11.4)
gen_require(`
class passwd rootok;
More information about the scm-commits
mailing list