[selinux-policy: 2922/3172] icecast patch from Dan Walsh

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 23:20:07 UTC 2010


commit 01c441355e3a166156bb27f9119467080692bc78
Author: Jeremy Solt <jsolt at tresys.com>
Date:   Mon Aug 30 11:32:58 2010 -0400

    icecast patch from Dan Walsh

 policy/modules/services/icecast.te |    6 ++++++
 1 files changed, 6 insertions(+), 0 deletions(-)
---
diff --git a/policy/modules/services/icecast.te b/policy/modules/services/icecast.te
index a57ffc0..fbcdd74 100644
--- a/policy/modules/services/icecast.te
+++ b/policy/modules/services/icecast.te
@@ -37,6 +37,8 @@ manage_dirs_pattern(icecast_t, icecast_var_run_t, icecast_var_run_t)
 manage_files_pattern(icecast_t, icecast_var_run_t, icecast_var_run_t)
 files_pid_filetrans(icecast_t, icecast_var_run_t, { file dir })
 
+kernel_read_system_state(icecast_t)
+
 corenet_tcp_bind_soundd_port(icecast_t)
 
 # Init script handling
@@ -51,5 +53,9 @@ miscfiles_read_localization(icecast_t)
 sysnet_dns_name_resolve(icecast_t)
 
 optional_policy(`
+	apache_read_sys_content(icecast_t)
+')
+
+optional_policy(`
 	rtkit_scheduled(icecast_t)
 ')


More information about the scm-commits mailing list