[selinux-policy: 2082/3172] trunk: add context contains to setrans.

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 22:04:44 UTC 2010


commit c1e501136bae01067bcd4bbae8d9732e2216b27f
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Mon Feb 9 13:58:22 2009 +0000

    trunk: add context contains to setrans.

 policy/modules/system/setrans.te |    7 ++++++-
 1 files changed, 6 insertions(+), 1 deletions(-)
---
diff --git a/policy/modules/system/setrans.te b/policy/modules/system/setrans.te
index aa92446..2ddabe1 100644
--- a/policy/modules/system/setrans.te
+++ b/policy/modules/system/setrans.te
@@ -1,5 +1,9 @@
 
-policy_module(setrans, 1.5.0)
+policy_module(setrans, 1.5.1)
+
+gen_require(`
+	class context contains;
+')
 
 ########################################
 #
@@ -35,6 +39,7 @@ allow setrans_t self:process { setrlimit getcap setcap signal_perms };
 allow setrans_t self:unix_stream_socket create_stream_socket_perms;
 allow setrans_t self:unix_dgram_socket create_socket_perms;
 allow setrans_t self:netlink_selinux_socket create_socket_perms;
+allow setrans_t self:context contains;
 
 can_exec(setrans_t, setrans_exec_t)
 corecmd_search_bin(setrans_t)


More information about the scm-commits mailing list