[selinux-policy: 2919/3172] openct patch from Dan Walsh
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 23:19:51 UTC 2010
commit c17ad385ac76dfd576b29b06351018d3e03a9c92
Author: Jeremy Solt <jsolt at tresys.com>
Date: Wed Sep 1 10:38:04 2010 -0400
openct patch from Dan Walsh
policy/modules/services/openct.te | 3 ++-
1 files changed, 2 insertions(+), 1 deletions(-)
---
diff --git a/policy/modules/services/openct.te b/policy/modules/services/openct.te
index 4996f62..538ddbc 100644
--- a/policy/modules/services/openct.te
+++ b/policy/modules/services/openct.te
@@ -20,9 +20,10 @@ files_pid_file(openct_var_run_t)
dontaudit openct_t self:capability sys_tty_config;
allow openct_t self:process signal_perms;
+manage_dirs_pattern(openct_t, openct_var_run_t, openct_var_run_t)
manage_files_pattern(openct_t, openct_var_run_t, openct_var_run_t)
manage_sock_files_pattern(openct_t, openct_var_run_t, openct_var_run_t)
-files_pid_filetrans(openct_t, openct_var_run_t, { file sock_file })
+files_pid_filetrans(openct_t, openct_var_run_t, { dir file sock_file })
kernel_read_kernel_sysctls(openct_t)
kernel_list_proc(openct_t)
More information about the scm-commits
mailing list