[selinux-policy: 2570/3172] Snmp patch from Dan Walsh.

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 22:48:25 UTC 2010


commit 449d2069ac5ebe7525ac4896a8a6441031ccd76a
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Mon Mar 22 11:08:31 2010 -0400

    Snmp patch from Dan Walsh.

 policy/modules/services/snmp.te |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)
---
diff --git a/policy/modules/services/snmp.te b/policy/modules/services/snmp.te
index 7a805f0..a9a4da7 100644
--- a/policy/modules/services/snmp.te
+++ b/policy/modules/services/snmp.te
@@ -1,5 +1,5 @@
 
-policy_module(snmp, 1.10.1)
+policy_module(snmp, 1.10.2)
 
 ########################################
 #
@@ -25,7 +25,7 @@ files_type(snmpd_var_lib_t)
 #
 # Local policy
 #
-allow snmpd_t self:capability { dac_override kill ipc_lock sys_ptrace net_admin sys_nice sys_tty_config };
+allow snmpd_t self:capability { chown dac_override kill ipc_lock sys_ptrace net_admin sys_nice sys_tty_config };
 dontaudit snmpd_t self:capability { sys_module sys_tty_config };
 allow snmpd_t self:process { signal_perms getsched setsched };
 allow snmpd_t self:fifo_file rw_fifo_file_perms;


More information about the scm-commits mailing list