[selinux-policy: 2569/3172] Sysstat patch from Dan Walsh.

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 22:48:20 UTC 2010


commit 08d7c7339bf9f859d32522e1be6117553334660d
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Mon Mar 22 10:47:41 2010 -0400

    Sysstat patch from Dan Walsh.

 policy/modules/services/sysstat.te |    7 ++++---
 1 files changed, 4 insertions(+), 3 deletions(-)
---
diff --git a/policy/modules/services/sysstat.te b/policy/modules/services/sysstat.te
index c920653..9260316 100644
--- a/policy/modules/services/sysstat.te
+++ b/policy/modules/services/sysstat.te
@@ -1,5 +1,5 @@
 
-policy_module(sysstat, 1.5.0)
+policy_module(sysstat, 1.5.1)
 
 ########################################
 #
@@ -19,14 +19,15 @@ logging_log_file(sysstat_log_t)
 # Local policy
 #
 
-allow sysstat_t self:capability { sys_resource sys_tty_config };
+allow sysstat_t self:capability { dac_override sys_resource sys_tty_config };
 dontaudit sysstat_t self:capability sys_admin;
 allow sysstat_t self:fifo_file rw_fifo_file_perms;
 
 can_exec(sysstat_t, sysstat_exec_t)
 
+manage_dirs_pattern(sysstat_t,sysstat_log_t,sysstat_log_t)
 manage_files_pattern(sysstat_t, sysstat_log_t, sysstat_log_t)
-read_lnk_files_pattern(sysstat_t, sysstat_log_t, sysstat_log_t)
+manage_lnk_files_pattern(sysstat_t,sysstat_log_t,sysstat_log_t)
 logging_log_filetrans(sysstat_t, sysstat_log_t, { file dir })
 
 # get info from /proc


More information about the scm-commits mailing list