[selinux-policy: 2187/3172] consolekit patch from dan.

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 22:14:16 UTC 2010


commit 4e7c0a93a6852eaab8b3d12ca41721e2e2793e06
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Wed Jul 29 09:13:54 2009 -0400

    consolekit patch from dan.

 policy/modules/services/consolekit.te |   18 ++++++++++++++----
 1 files changed, 14 insertions(+), 4 deletions(-)
---
diff --git a/policy/modules/services/consolekit.te b/policy/modules/services/consolekit.te
index abb4b9d..3313441 100644
--- a/policy/modules/services/consolekit.te
+++ b/policy/modules/services/consolekit.te
@@ -1,5 +1,5 @@
 
-policy_module(consolekit, 1.4.1)
+policy_module(consolekit, 1.4.2)
 
 ########################################
 #
@@ -11,7 +11,7 @@ type consolekit_exec_t;
 init_daemon_domain(consolekit_t, consolekit_exec_t)
 
 type consolekit_log_t;
-files_pid_file(consolekit_log_t)
+logging_log_file(consolekit_log_t)
 
 type consolekit_var_run_t;
 files_pid_file(consolekit_var_run_t)
@@ -50,6 +50,7 @@ files_read_etc_files(consolekit_t)
 files_read_usr_files(consolekit_t)
 # needs to read /var/lib/dbus/machine-id
 files_read_var_lib_files(consolekit_t)
+files_search_all_mountpoints(consolekit_t)
 
 fs_list_inotifyfs(consolekit_t)
 
@@ -63,10 +64,12 @@ init_telinit(consolekit_t)
 init_rw_utmp(consolekit_t)
 
 logging_send_syslog_msg(consolekit_t)
+logging_send_audit_msgs(consolekit_t)
 
 miscfiles_read_localization(consolekit_t)
 
 userdom_dontaudit_read_user_home_content_files(consolekit_t)
+userdom_read_user_tmp_files(consolekit_t)
 
 hal_ptrace(consolekit_t)
 
@@ -81,7 +84,7 @@ tunable_policy(`use_samba_home_dirs',`
 ')
 
 optional_policy(`
-	dbus_system_bus_client(consolekit_t)
+	dbus_system_domain(consolekit_t, consolekit_exec_t)
 
 	optional_policy(`
 		hal_dbus_chat(consolekit_t)
@@ -97,8 +100,15 @@ optional_policy(`
 ')
 
 optional_policy(`
+	policykit_domtrans_auth(consolekit_t)
+	policykit_read_lib(consolekit_t)
+	policykit_read_reload(consolekit_t)
+')
+
+optional_policy(`
+	xserver_read_xdm_pid(consolekit_t)
 	xserver_read_user_xauth(consolekit_t)
-	xserver_stream_connect(consolekit_t)
+	corenet_tcp_connect_xserver_port(consolekit_t)
 ')
 
 optional_policy(`


More information about the scm-commits mailing list