[selinux-policy: 1232/3172] fix up cron_crw_tcp_socket()

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 20:51:38 UTC 2010


commit e1ee92b29022ced701a0649f3ea723bacaf4d148
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Mon Feb 20 14:31:45 2006 +0000

    fix up cron_crw_tcp_socket()

 refpolicy/policy/modules/services/cron.if |    7 +++----
 refpolicy/policy/modules/services/mta.te  |    2 +-
 2 files changed, 4 insertions(+), 5 deletions(-)
---
diff --git a/refpolicy/policy/modules/services/cron.if b/refpolicy/policy/modules/services/cron.if
index 6226fc0..c0558b6 100644
--- a/refpolicy/policy/modules/services/cron.if
+++ b/refpolicy/policy/modules/services/cron.if
@@ -434,7 +434,7 @@ interface(`cron_rw_pipes',`
 
 ########################################
 ## <summary>
-##	Create, read, and write a cron daemon TCP socket.
+##	Read, and write cron daemon TCP sockets.
 ## </summary>
 ## <param name="domain">
 ##	<summary>
@@ -442,13 +442,12 @@ interface(`cron_rw_pipes',`
 ##	</summary>
 ## </param>
 #
-# cjp: need to fix this name
-interface(`cron_crw_tcp_socket',`
+interface(`cron_rw_tcp_sockets',`
 	gen_require(`
 		type crond_t;
 	')
 
-	allow $1 crond_t:tcp_socket { create read write };
+	allow $1 crond_t:tcp_socket { read write };
 ')
 
 ########################################
diff --git a/refpolicy/policy/modules/services/mta.te b/refpolicy/policy/modules/services/mta.te
index 11a75c3..39cc1fb 100644
--- a/refpolicy/policy/modules/services/mta.te
+++ b/refpolicy/policy/modules/services/mta.te
@@ -157,7 +157,7 @@ optional_policy(`postfix',`
 	')
 
 	optional_policy(`cron',`
-		cron_crw_tcp_socket(system_mail_t)
+		cron_rw_tcp_sockets(system_mail_t)
 	')
 ')
 


More information about the scm-commits mailing list