[selinux-policy: 2337/3172] apm patch from Dan Walsh.

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 22:27:29 UTC 2010


commit 7e81399d84bf023d362ec8ee62ef3a6b40882c4f
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Fri Dec 18 10:35:31 2009 -0500

    apm patch from Dan Walsh.

 policy/modules/services/apm.te |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)
---
diff --git a/policy/modules/services/apm.te b/policy/modules/services/apm.te
index 88c9d86..b215a16 100644
--- a/policy/modules/services/apm.te
+++ b/policy/modules/services/apm.te
@@ -1,5 +1,5 @@
 
-policy_module(apm, 1.10.0)
+policy_module(apm, 1.10.1)
 
 ########################################
 #
@@ -60,7 +60,7 @@ logging_send_syslog_msg(apm_t)
 # mknod: controlling an orderly resume of PCMCIA requires creating device
 # nodes 254,{0,1,2} for some reason.
 allow apmd_t self:capability { sys_admin sys_nice sys_time kill mknod };
-dontaudit apmd_t self:capability { setuid dac_override dac_read_search sys_tty_config };
+dontaudit apmd_t self:capability { setuid dac_override dac_read_search sys_ptrace sys_tty_config };
 allow apmd_t self:process { signal_perms getsession };
 allow apmd_t self:fifo_file rw_fifo_file_perms;
 allow apmd_t self:unix_dgram_socket create_socket_perms;


More information about the scm-commits mailing list