[selinux-policy: 2187/3172] consolekit patch from dan.
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 22:14:16 UTC 2010
commit 4e7c0a93a6852eaab8b3d12ca41721e2e2793e06
Author: Chris PeBenito <cpebenito at tresys.com>
Date: Wed Jul 29 09:13:54 2009 -0400
consolekit patch from dan.
policy/modules/services/consolekit.te | 18 ++++++++++++++----
1 files changed, 14 insertions(+), 4 deletions(-)
---
diff --git a/policy/modules/services/consolekit.te b/policy/modules/services/consolekit.te
index abb4b9d..3313441 100644
--- a/policy/modules/services/consolekit.te
+++ b/policy/modules/services/consolekit.te
@@ -1,5 +1,5 @@
-policy_module(consolekit, 1.4.1)
+policy_module(consolekit, 1.4.2)
########################################
#
@@ -11,7 +11,7 @@ type consolekit_exec_t;
init_daemon_domain(consolekit_t, consolekit_exec_t)
type consolekit_log_t;
-files_pid_file(consolekit_log_t)
+logging_log_file(consolekit_log_t)
type consolekit_var_run_t;
files_pid_file(consolekit_var_run_t)
@@ -50,6 +50,7 @@ files_read_etc_files(consolekit_t)
files_read_usr_files(consolekit_t)
# needs to read /var/lib/dbus/machine-id
files_read_var_lib_files(consolekit_t)
+files_search_all_mountpoints(consolekit_t)
fs_list_inotifyfs(consolekit_t)
@@ -63,10 +64,12 @@ init_telinit(consolekit_t)
init_rw_utmp(consolekit_t)
logging_send_syslog_msg(consolekit_t)
+logging_send_audit_msgs(consolekit_t)
miscfiles_read_localization(consolekit_t)
userdom_dontaudit_read_user_home_content_files(consolekit_t)
+userdom_read_user_tmp_files(consolekit_t)
hal_ptrace(consolekit_t)
@@ -81,7 +84,7 @@ tunable_policy(`use_samba_home_dirs',`
')
optional_policy(`
- dbus_system_bus_client(consolekit_t)
+ dbus_system_domain(consolekit_t, consolekit_exec_t)
optional_policy(`
hal_dbus_chat(consolekit_t)
@@ -97,8 +100,15 @@ optional_policy(`
')
optional_policy(`
+ policykit_domtrans_auth(consolekit_t)
+ policykit_read_lib(consolekit_t)
+ policykit_read_reload(consolekit_t)
+')
+
+optional_policy(`
+ xserver_read_xdm_pid(consolekit_t)
xserver_read_user_xauth(consolekit_t)
- xserver_stream_connect(consolekit_t)
+ corenet_tcp_connect_xserver_port(consolekit_t)
')
optional_policy(`
More information about the scm-commits
mailing list