[selinux-policy: 633/3172] add missing rules of other domains using inn

[Daniel J Walsh]

commit 9b06402eaf378b7ecaa1cbf68c7d52b44fdfe133
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Thu Sep 8 13:23:11 2005 +0000

    add missing rules of other domains using inn

 refpolicy/policy/modules/services/cron.te     |    6 ++++++
 refpolicy/policy/modules/system/init.te       |    4 ++++
 refpolicy/policy/modules/system/logging.te    |    4 ++++
 refpolicy/policy/modules/system/userdomain.if |    6 ++++++
 4 files changed, 20 insertions(+), 0 deletions(-)
---
diff --git a/refpolicy/policy/modules/services/cron.te b/refpolicy/policy/modules/services/cron.te
index d0ddc63..f93be50 100644
--- a/refpolicy/policy/modules/services/cron.te
+++ b/refpolicy/policy/modules/services/cron.te
@@ -137,6 +137,12 @@ tunable_policy(`fcron_crond', `
 	allow crond_t system_cron_spool_t:file create_file_perms;
 ')
 
+optional_policy(`inn.te',`
+	inn_manage_log(system_crond_t)
+	inn_manage_pid(system_crond_t)
+	inn_read_config(system_crond_t)
+')
+
 optional_policy(`nis.te',`
 	nis_use_ypbind(crond_t)
 ')
diff --git a/refpolicy/policy/modules/system/init.te b/refpolicy/policy/modules/system/init.te
index 1a7e128..18a32f2 100644
--- a/refpolicy/policy/modules/system/init.te
+++ b/refpolicy/policy/modules/system/init.te
@@ -396,6 +396,10 @@ optional_policy(`hotplug.te',`
 	modutils_read_mods_deps(initrc_t)
 ')
 
+optional_policy(`inn.te',`
+	inn_exec_config(initrc_t)
+')
+
 optional_policy(`ipsec.te',`
 	ipsec_read_config(initrc_t)
 	ipsec_manage_pid(initrc_t)
diff --git a/refpolicy/policy/modules/system/logging.te b/refpolicy/policy/modules/system/logging.te
index 5de1e2c..1625b3d 100644
--- a/refpolicy/policy/modules/system/logging.te
+++ b/refpolicy/policy/modules/system/logging.te
@@ -264,6 +264,10 @@ optional_policy(`cron.te',`
 	cron_rw_log(syslogd_t)
 ')
 
+optional_policy(`inn.te',`
+	inn_manage_log(syslogd_t)
+')
+
 optional_policy(`nis.te',`
 	nis_use_ypbind(syslogd_t)
 ')
diff --git a/refpolicy/policy/modules/system/userdomain.if b/refpolicy/policy/modules/system/userdomain.if
index 939929e..9996324 100644
--- a/refpolicy/policy/modules/system/userdomain.if
+++ b/refpolicy/policy/modules/system/userdomain.if
@@ -253,6 +253,12 @@ template(`base_user_template',`
 		inetd_tcp_connect($1_t)
 	')
 
+	optional_policy(`inn.te',`
+		inn_read_config($1_t)
+		inn_read_news_lib($1_t)
+		inn_read_news_spool($1_t)
+	')
+
 	optional_policy(`nis.te',`
 		nis_use_ypbind($1_t)
 	')