[selinux-policy: 2911/3172] Add labels for /lib/readahead. Add back gnome_setattr interface

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 23:19:10 UTC 2010


commit 4251ae10048447509cf0e5f02734f03f5f2fc01e
Author: Dan Walsh <dwalsh at redhat.com>
Date:   Mon Sep 13 16:15:43 2010 -0400

    Add labels for /lib/readahead.
    Add back gnome_setattr interface

 policy/modules/apps/gnome.if          |   19 +++++++++++++++++++
 policy/modules/kernel/corecommands.fc |    1 +
 2 files changed, 20 insertions(+), 0 deletions(-)
---
diff --git a/policy/modules/apps/gnome.if b/policy/modules/apps/gnome.if
index d3b8cc8..250935a 100644
--- a/policy/modules/apps/gnome.if
+++ b/policy/modules/apps/gnome.if
@@ -410,6 +410,25 @@ interface(`gnome_search_gconf',`
 
 ########################################
 ## <summary>
+##	Set attributes of Gnome config dirs.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`gnome_setattr_config_dirs',`
+	gen_require(`
+		type gnome_home_t;
+	')
+
+	setattr_dirs_pattern($1, gnome_home_t, gnome_home_t)
+	files_search_home($1)
+')
+
+########################################
+## <summary>
 ##	Append gconf home files
 ## </summary>
 ## <param name="domain">
diff --git a/policy/modules/kernel/corecommands.fc b/policy/modules/kernel/corecommands.fc
index 23a1d11..93c9ec1 100644
--- a/policy/modules/kernel/corecommands.fc
+++ b/policy/modules/kernel/corecommands.fc
@@ -134,6 +134,7 @@ ifdef(`distro_gentoo',`
 /lib/rcscripts/net\.modules\.d/helpers\.d/dhclient-.* -- gen_context(system_u:object_r:bin_t,s0)
 /lib/rcscripts/net\.modules\.d/helpers\.d/udhcpc-.* -- gen_context(system_u:object_r:bin_t,s0)
 ')
+/lib/readahead(/.*)?			gen_context(system_u:object_r:bin_t,s0)
 /lib/upstart(/.*)?			gen_context(system_u:object_r:bin_t,s0)
 
 #


More information about the scm-commits mailing list