[selinux-policy: 2975/3172] Add missing admin_patterns to rpcbind_admin.

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 23:24:50 UTC 2010


commit 4ec4a49e8ae12af3abcbb5b1f01021cd7379e15c
Author: Dominick Grift <domg472 at gmail.com>
Date:   Wed Sep 15 14:16:05 2010 +0200

    Add missing admin_patterns to rpcbind_admin.
    
    Signed-off-by: Dominick Grift <domg472 at gmail.com>

 policy/modules/services/rpcbind.if |    6 ++++++
 1 files changed, 6 insertions(+), 0 deletions(-)
---
diff --git a/policy/modules/services/rpcbind.if b/policy/modules/services/rpcbind.if
index bd3c6b8..5a4d69d 100644
--- a/policy/modules/services/rpcbind.if
+++ b/policy/modules/services/rpcbind.if
@@ -144,4 +144,10 @@ interface(`rpcbind_admin',`
 	domain_system_change_exemption($1)
 	role_transition $2 rpcbind_initrc_exec_t system_r;
 	allow $2 system_r;
+
+	files_search_var_lib($1)
+	admin_pattern($1, rpcbind_var_lib_t)
+
+	files_search_pids($1)
+	admin_pattern($1, rpcbind_var_run_t)
 ')


More information about the scm-commits mailing list