[selinux-policy: 900/3172] add missing httpd_helper_t tty part

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 20:22:50 UTC 2010


commit aba9c7a3cfb1f48a0c488f7c13c149aacf4dc5a6
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Mon Oct 31 20:58:44 2005 +0000

    add missing httpd_helper_t tty part

 refpolicy/policy/modules/services/apache.te |    7 +++++++
 1 files changed, 7 insertions(+), 0 deletions(-)
---
diff --git a/refpolicy/policy/modules/services/apache.te b/refpolicy/policy/modules/services/apache.te
index ac2e609..2a61cf3 100644
--- a/refpolicy/policy/modules/services/apache.te
+++ b/refpolicy/policy/modules/services/apache.te
@@ -446,6 +446,13 @@ libs_use_shared_libs(httpd_helper_t)
 
 logging_send_syslog_msg(httpd_helper_t)
 
+tunable_policy(`httpd_tty_comm',`
+	# cjp: this is redundant:
+	term_use_controlling_term(httpd_helper_t)
+
+	userdom_use_sysadm_terms(httpd_helper_t)
+')
+
 ########################################
 #
 # Apache PHP script local policy


More information about the scm-commits mailing list