[selinux-policy: 2911/3172] Add labels for /lib/readahead. Add back gnome_setattr interface
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 23:19:10 UTC 2010
commit 4251ae10048447509cf0e5f02734f03f5f2fc01e
Author: Dan Walsh <dwalsh at redhat.com>
Date: Mon Sep 13 16:15:43 2010 -0400
Add labels for /lib/readahead.
Add back gnome_setattr interface
policy/modules/apps/gnome.if | 19 +++++++++++++++++++
policy/modules/kernel/corecommands.fc | 1 +
2 files changed, 20 insertions(+), 0 deletions(-)
---
diff --git a/policy/modules/apps/gnome.if b/policy/modules/apps/gnome.if
index d3b8cc8..250935a 100644
--- a/policy/modules/apps/gnome.if
+++ b/policy/modules/apps/gnome.if
@@ -410,6 +410,25 @@ interface(`gnome_search_gconf',`
########################################
## <summary>
+## Set attributes of Gnome config dirs.
+## </summary>
+## <param name="domain">
+## <summary>
+## Domain allowed access.
+## </summary>
+## </param>
+#
+interface(`gnome_setattr_config_dirs',`
+ gen_require(`
+ type gnome_home_t;
+ ')
+
+ setattr_dirs_pattern($1, gnome_home_t, gnome_home_t)
+ files_search_home($1)
+')
+
+########################################
+## <summary>
## Append gconf home files
## </summary>
## <param name="domain">
diff --git a/policy/modules/kernel/corecommands.fc b/policy/modules/kernel/corecommands.fc
index 23a1d11..93c9ec1 100644
--- a/policy/modules/kernel/corecommands.fc
+++ b/policy/modules/kernel/corecommands.fc
@@ -134,6 +134,7 @@ ifdef(`distro_gentoo',`
/lib/rcscripts/net\.modules\.d/helpers\.d/dhclient-.* -- gen_context(system_u:object_r:bin_t,s0)
/lib/rcscripts/net\.modules\.d/helpers\.d/udhcpc-.* -- gen_context(system_u:object_r:bin_t,s0)
')
+/lib/readahead(/.*)? gen_context(system_u:object_r:bin_t,s0)
/lib/upstart(/.*)? gen_context(system_u:object_r:bin_t,s0)
#
More information about the scm-commits
mailing list