[selinux-policy: 2830/3172] Fix policy

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 23:11:58 UTC 2010


commit 18549c23dfb13dfc91ec5eeec0498dd751cb3310
Author: Dan Walsh <dwalsh at redhat.com>
Date:   Thu Aug 26 11:09:31 2010 -0400

    Fix policy

 policy/modules/apps/kdumpgui.te |   34 ++++++++++++++++------------------
 1 files changed, 16 insertions(+), 18 deletions(-)
---
diff --git a/policy/modules/apps/kdumpgui.te b/policy/modules/apps/kdumpgui.te
index 24a2bd0..3812a46 100644
--- a/policy/modules/apps/kdumpgui.te
+++ b/policy/modules/apps/kdumpgui.te
@@ -1,4 +1,4 @@
-policy_module(kdumpgui,1.0.0)
+policy_module(kdumpgui, 1.0.0)
 
 ########################################
 #
@@ -7,7 +7,6 @@ policy_module(kdumpgui,1.0.0)
 
 type kdumpgui_t;
 type kdumpgui_exec_t;
-
 dbus_system_domain(kdumpgui_t, kdumpgui_exec_t)
 
 ######################################
@@ -17,37 +16,36 @@ dbus_system_domain(kdumpgui_t, kdumpgui_exec_t)
 
 allow kdumpgui_t self:capability { net_admin sys_admin sys_rawio };
 allow kdumpgui_t self:fifo_file rw_fifo_file_perms;
-
 allow kdumpgui_t self:netlink_kobject_uevent_socket create_socket_perms;
 
-kdump_manage_config(kdumpgui_t)
-kdump_initrc_domtrans(kdumpgui_t)
-
-corecmd_exec_bin(kdumpgui_t)
-corecmd_exec_shell(kdumpgui_t)
-consoletype_exec(kdumpgui_t)
-
 kernel_read_system_state(kdumpgui_t)
 kernel_read_network_state(kdumpgui_t)
 
-storage_raw_read_fixed_disk(kdumpgui_t)
-storage_raw_write_fixed_disk(kdumpgui_t)
+corecmd_exec_bin(kdumpgui_t)
+corecmd_exec_shell(kdumpgui_t)
 
 dev_dontaudit_getattr_all_chr_files(kdumpgui_t)
 dev_read_sysfs(kdumpgui_t)
 
-# for blkid.tab
-files_manage_etc_runtime_files(kdumpgui_t)
-files_etc_filetrans_etc_runtime(kdumpgui_t, file)
-
 files_manage_boot_files(kdumpgui_t)
 files_manage_boot_symlinks(kdumpgui_t)
 # Needed for running chkconfig
 files_manage_etc_symlinks(kdumpgui_t)
+# for blkid.tab
+files_manage_etc_runtime_files(kdumpgui_t)
+files_etc_filetrans_etc_runtime(kdumpgui_t, file)
 files_read_usr_files(kdumpgui_t)
 
+storage_raw_read_fixed_disk(kdumpgui_t)
+storage_raw_write_fixed_disk(kdumpgui_t)
+
 auth_use_nsswitch(kdumpgui_t)
 
+consoletype_exec(kdumpgui_t)
+
+kdump_manage_config(kdumpgui_t)
+kdump_initrc_domtrans(kdumpgui_t)
+
 logging_send_syslog_msg(kdumpgui_t)
 
 miscfiles_read_localization(kdumpgui_t)
@@ -57,7 +55,7 @@ init_dontaudit_read_all_script_files(kdumpgui_t)
 userdom_dontaudit_search_admin_dir(kdumpgui_t)
 
 optional_policy(`
-        dev_rw_lvm_control(kdumpgui_t)
+	dev_rw_lvm_control(kdumpgui_t)
 ')
 
 optional_policy(`
@@ -65,5 +63,5 @@ optional_policy(`
 ')
 
 optional_policy(`
-        policykit_dbus_chat(kdumpgui_t)
+	policykit_dbus_chat(kdumpgui_t)
 ')


More information about the scm-commits mailing list