[selinux-policy: 2539/3172] amavis uses uptime which reads utmp, and reads certs - from Dan Walsh

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 22:45:41 UTC 2010


commit 6a035482dcea369eb65ad45beee32ea484ec132a
Author: Jeremy Solt <jsolt at tresys.com>
Date:   Tue Mar 16 15:55:16 2010 -0400

    amavis uses uptime which reads utmp, and reads certs - from Dan Walsh

 policy/modules/services/amavis.te |    3 +++
 1 files changed, 3 insertions(+), 0 deletions(-)
---
diff --git a/policy/modules/services/amavis.te b/policy/modules/services/amavis.te
index 9b1b127..b6e96b8 100644
--- a/policy/modules/services/amavis.te
+++ b/policy/modules/services/amavis.te
@@ -138,10 +138,13 @@ fs_getattr_xattr_fs(amavis_t)
 
 auth_dontaudit_read_shadow(amavis_t)
 
+# uses uptime which reads utmp - redhat bug 561383
+init_read_utmp(amavis_t)
 init_stream_connect_script(amavis_t)
 
 logging_send_syslog_msg(amavis_t)
 
+miscfiles_read_certs(amavis_t)
 miscfiles_read_localization(amavis_t)
 
 sysnet_dns_name_resolve(amavis_t)


More information about the scm-commits mailing list