[selinux-policy: 2375/3172] Inetd patch from Dan Walsh.

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 22:30:52 UTC 2010


commit d2acef78f4dd3304c66f92b08ea25d9bfd115396
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Fri Jan 8 10:36:49 2010 -0500

    Inetd patch from Dan Walsh.

 policy/modules/kernel/corenetwork.te.in |    3 ++-
 policy/modules/services/inetd.fc        |    2 +-
 policy/modules/services/inetd.te        |    6 +++++-
 3 files changed, 8 insertions(+), 3 deletions(-)
---
diff --git a/policy/modules/kernel/corenetwork.te.in b/policy/modules/kernel/corenetwork.te.in
index df59b53..0382b5d 100644
--- a/policy/modules/kernel/corenetwork.te.in
+++ b/policy/modules/kernel/corenetwork.te.in
@@ -1,5 +1,5 @@
 
-policy_module(corenetwork, 1.13.1)
+policy_module(corenetwork, 1.13.2)
 
 ########################################
 #
@@ -100,6 +100,7 @@ network_port(ftp, tcp,21,s0)
 network_port(ftp_data, tcp,20,s0)
 network_port(gatekeeper, udp,1718,s0, udp,1719,s0, tcp,1721,s0, tcp,7000,s0)
 network_port(giftd, tcp,1213,s0)
+network_port(git, tcp,9418,s0, udp,9418,s0)
 network_port(gopher, tcp,70,s0, udp,70,s0)
 network_port(gpsd, tcp,2947,s0)
 network_port(hddtemp, tcp,7634,s0)
diff --git a/policy/modules/services/inetd.fc b/policy/modules/services/inetd.fc
index a43de46..39d5baa 100644
--- a/policy/modules/services/inetd.fc
+++ b/policy/modules/services/inetd.fc
@@ -9,4 +9,4 @@
 
 /var/log/(x)?inetd\.log	--	gen_context(system_u:object_r:inetd_log_t,s0)
 
-/var/run/inetd\.pid	--	gen_context(system_u:object_r:inetd_var_run_t,s0)
+/var/run/(x)?inetd\.pid	--	gen_context(system_u:object_r:inetd_var_run_t,s0)
diff --git a/policy/modules/services/inetd.te b/policy/modules/services/inetd.te
index 67bc725..66788d3 100644
--- a/policy/modules/services/inetd.te
+++ b/policy/modules/services/inetd.te
@@ -1,5 +1,5 @@
 
-policy_module(inetd, 1.10.0)
+policy_module(inetd, 1.10.1)
 
 ########################################
 #
@@ -104,6 +104,8 @@ corenet_udp_bind_swat_port(inetd_t)
 corenet_tcp_bind_telnetd_port(inetd_t)
 corenet_udp_bind_tftp_port(inetd_t)
 corenet_tcp_bind_ssh_port(inetd_t)
+corenet_tcp_bind_git_port(inetd_t)
+corenet_udp_bind_git_port(inetd_t)
 
 # service port packets:
 corenet_sendrecv_amanda_server_packets(inetd_t)
@@ -138,6 +140,8 @@ domain_use_interactive_fds(inetd_t)
 files_read_etc_files(inetd_t)
 files_read_etc_runtime_files(inetd_t)
 
+auth_use_nsswitch(inetd_t)
+
 logging_send_syslog_msg(inetd_t)
 
 miscfiles_read_localization(inetd_t)


More information about the scm-commits mailing list