[selinux-policy: 847/3172] testing fixes

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 20:18:19 UTC 2010


commit 7b90f2db5a90c127129bc0646b30c46a985e9832
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Tue Oct 25 17:37:56 2005 +0000

    testing fixes

 refpolicy/policy/modules/services/dhcp.te |    4 +++-
 1 files changed, 3 insertions(+), 1 deletions(-)
---
diff --git a/refpolicy/policy/modules/services/dhcp.te b/refpolicy/policy/modules/services/dhcp.te
index 0d1cec9..d738e10 100644
--- a/refpolicy/policy/modules/services/dhcp.te
+++ b/refpolicy/policy/modules/services/dhcp.te
@@ -24,7 +24,8 @@ files_pid_file(dhcpd_var_run_t)
 # Local policy
 #
 
-dontaudit dhcpd_t self:capability { net_raw net_admin sys_tty_config };
+allow dhcpd_t self:capability net_raw;
+dontaudit dhcpd_t self:capability { net_admin sys_tty_config };
 allow dhcpd_t self:process signal_perms;
 allow dhcpd_t self:fifo_file { read write getattr };
 allow dhcpd_t self:unix_dgram_socket create_socket_perms;
@@ -38,6 +39,7 @@ allow dhcpd_t self:rawip_socket create_socket_perms;
 
 can_exec(dhcpd_t,dhcpd_exec_t)
 
+allow dhcpd_t dhcpd_state_t:dir rw_dir_perms;
 allow dhcpd_t dhcpd_state_t:file create_file_perms;
 sysnet_create_dhcp_state(dhcpd_t,dhcpd_state_t)
 


More information about the scm-commits mailing list