[selinux-policy: 2997/3172] Use ps_process_pattern to read state.

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 23:26:43 UTC 2010


commit 2de2341198332725de7fda5f4b0c1312d13bdbf5
Author: Dominick Grift <domg472 at gmail.com>
Date:   Thu Sep 16 09:31:27 2010 +0200

    Use ps_process_pattern to read state.
    
    Signed-off-by: Dominick Grift <domg472 at gmail.com>
    
    Use ps_process_pattern to read state.
    
    Use ps_process_pattern to read state.

 policy/modules/services/samba.if    |    2 +-
 policy/modules/services/sendmail.if |    4 ++--
 policy/modules/services/sssd.if     |    2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)
---
diff --git a/policy/modules/services/samba.if b/policy/modules/services/samba.if
index 20a1f78..93b58ea 100644
--- a/policy/modules/services/samba.if
+++ b/policy/modules/services/samba.if
@@ -776,7 +776,7 @@ interface(`samba_admin',`
 	ps_process_pattern($1, nmbd_t)
 
 	allow $1 samba_unconfined_script_t:process { ptrace signal_perms };
-	read_files_pattern($1, samba_unconfined_script_t, samba_unconfined_script_t)
+	ps_process_pattern($1, samba_unconfined_script_t)
 
 	samba_run_smbcontrol($1, $2, $3)
 	samba_run_winbind_helper($1, $2, $3)
diff --git a/policy/modules/services/sendmail.if b/policy/modules/services/sendmail.if
index b0c2f3b..cf9fdcd 100644
--- a/policy/modules/services/sendmail.if
+++ b/policy/modules/services/sendmail.if
@@ -335,10 +335,10 @@ interface(`sendmail_admin',`
 	')
 
 	allow $1 sendmail_t:process { ptrace signal_perms };
-	read_files_pattern($1, sendmail_t, sendmail_t)
+	ps_process_pattern($1, sendmail_t)
 
 	allow $1 unconfined_sendmail_t:process { ptrace signal_perms };
-	read_files_pattern($1, unconfined_sendmail_t, unconfined_sendmail_t)
+	ps_process_pattern($1, unconfined_sendmail_t)
 
 	sendmail_initrc_domtrans($1)
 	domain_system_change_exemption($1)
diff --git a/policy/modules/services/sssd.if b/policy/modules/services/sssd.if
index 7e44f26..39cc338 100644
--- a/policy/modules/services/sssd.if
+++ b/policy/modules/services/sssd.if
@@ -234,7 +234,7 @@ interface(`sssd_admin',`
 	')
 
 	allow $1 sssd_t:process { ptrace signal_perms };
-	read_files_pattern($1, sssd_t, sssd_t)
+	ps_process_pattern($1, sssd_t)
 
 	# Allow sssd_t to restart the apache service
 	sssd_initrc_domtrans($1)


More information about the scm-commits mailing list