[selinux-policy: 3115/3172] Make hal a dbus_system_domain Allow dovecot to append all logs

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 23:37:02 UTC 2010


commit f4dc19884314591c4857a64b9d3a4e6c82a45a8a
Author: Dan Walsh <dwalsh at redhat.com>
Date:   Thu Sep 23 08:59:40 2010 -0400

    Make hal a dbus_system_domain
    Allow dovecot to append all logs

 policy/modules/services/dovecot.te |    2 +-
 policy/modules/services/hal.te     |    3 +--
 2 files changed, 2 insertions(+), 3 deletions(-)
---
diff --git a/policy/modules/services/dovecot.te b/policy/modules/services/dovecot.te
index aff2296..396f956 100644
--- a/policy/modules/services/dovecot.te
+++ b/policy/modules/services/dovecot.te
@@ -288,7 +288,7 @@ files_read_etc_runtime_files(dovecot_deliver_t)
 auth_use_nsswitch(dovecot_deliver_t)
 
 logging_send_syslog_msg(dovecot_deliver_t)
-logging_search_logs(dovecot_deliver_t)
+logging_append_all_logs(dovecot_deliver_t)
 
 miscfiles_read_localization(dovecot_deliver_t)
 
diff --git a/policy/modules/services/hal.te b/policy/modules/services/hal.te
index b3fdcd5..ae0b05b 100644
--- a/policy/modules/services/hal.te
+++ b/policy/modules/services/hal.te
@@ -262,8 +262,7 @@ optional_policy(`
 ')
 
 optional_policy(`
-	dbus_system_bus_client(hald_t)
-	dbus_connect_system_bus(hald_t)
+	dbus_system_domain(hald_t, hald_exec_t)
 
 	init_dbus_chat_script(hald_t)
 


More information about the scm-commits mailing list