[selinux-policy: 2830/3172] Fix policy
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 23:11:58 UTC 2010
commit 18549c23dfb13dfc91ec5eeec0498dd751cb3310
Author: Dan Walsh <dwalsh at redhat.com>
Date: Thu Aug 26 11:09:31 2010 -0400
Fix policy
policy/modules/apps/kdumpgui.te | 34 ++++++++++++++++------------------
1 files changed, 16 insertions(+), 18 deletions(-)
---
diff --git a/policy/modules/apps/kdumpgui.te b/policy/modules/apps/kdumpgui.te
index 24a2bd0..3812a46 100644
--- a/policy/modules/apps/kdumpgui.te
+++ b/policy/modules/apps/kdumpgui.te
@@ -1,4 +1,4 @@
-policy_module(kdumpgui,1.0.0)
+policy_module(kdumpgui, 1.0.0)
########################################
#
@@ -7,7 +7,6 @@ policy_module(kdumpgui,1.0.0)
type kdumpgui_t;
type kdumpgui_exec_t;
-
dbus_system_domain(kdumpgui_t, kdumpgui_exec_t)
######################################
@@ -17,37 +16,36 @@ dbus_system_domain(kdumpgui_t, kdumpgui_exec_t)
allow kdumpgui_t self:capability { net_admin sys_admin sys_rawio };
allow kdumpgui_t self:fifo_file rw_fifo_file_perms;
-
allow kdumpgui_t self:netlink_kobject_uevent_socket create_socket_perms;
-kdump_manage_config(kdumpgui_t)
-kdump_initrc_domtrans(kdumpgui_t)
-
-corecmd_exec_bin(kdumpgui_t)
-corecmd_exec_shell(kdumpgui_t)
-consoletype_exec(kdumpgui_t)
-
kernel_read_system_state(kdumpgui_t)
kernel_read_network_state(kdumpgui_t)
-storage_raw_read_fixed_disk(kdumpgui_t)
-storage_raw_write_fixed_disk(kdumpgui_t)
+corecmd_exec_bin(kdumpgui_t)
+corecmd_exec_shell(kdumpgui_t)
dev_dontaudit_getattr_all_chr_files(kdumpgui_t)
dev_read_sysfs(kdumpgui_t)
-# for blkid.tab
-files_manage_etc_runtime_files(kdumpgui_t)
-files_etc_filetrans_etc_runtime(kdumpgui_t, file)
-
files_manage_boot_files(kdumpgui_t)
files_manage_boot_symlinks(kdumpgui_t)
# Needed for running chkconfig
files_manage_etc_symlinks(kdumpgui_t)
+# for blkid.tab
+files_manage_etc_runtime_files(kdumpgui_t)
+files_etc_filetrans_etc_runtime(kdumpgui_t, file)
files_read_usr_files(kdumpgui_t)
+storage_raw_read_fixed_disk(kdumpgui_t)
+storage_raw_write_fixed_disk(kdumpgui_t)
+
auth_use_nsswitch(kdumpgui_t)
+consoletype_exec(kdumpgui_t)
+
+kdump_manage_config(kdumpgui_t)
+kdump_initrc_domtrans(kdumpgui_t)
+
logging_send_syslog_msg(kdumpgui_t)
miscfiles_read_localization(kdumpgui_t)
@@ -57,7 +55,7 @@ init_dontaudit_read_all_script_files(kdumpgui_t)
userdom_dontaudit_search_admin_dir(kdumpgui_t)
optional_policy(`
- dev_rw_lvm_control(kdumpgui_t)
+ dev_rw_lvm_control(kdumpgui_t)
')
optional_policy(`
@@ -65,5 +63,5 @@ optional_policy(`
')
optional_policy(`
- policykit_dbus_chat(kdumpgui_t)
+ policykit_dbus_chat(kdumpgui_t)
')
More information about the scm-commits
mailing list