[gogoc] Add gogoc_etc_t SELinux type

Juan Orti jorti at fedoraproject.org
Sun Aug 18 13:59:56 UTC 2013


commit 5ecf02a6e928329ca3cedf34fd468ece498652cf
Author: Juan Orti Alcaine <jorti at fedoraproject.org>
Date:   Sun Aug 18 15:59:17 2013 +0200

    Add gogoc_etc_t SELinux type

 gogoc.fc   |    2 ++
 gogoc.spec |    5 ++++-
 gogoc.te   |   10 +++++++++-
 3 files changed, 15 insertions(+), 2 deletions(-)
---
diff --git a/gogoc.fc b/gogoc.fc
index 6293f13..e0eabce 100644
--- a/gogoc.fc
+++ b/gogoc.fc
@@ -7,3 +7,5 @@
 /var/log/gogoc(/.*)?		gen_context(system_u:object_r:gogoc_log_t,s0)
 
 /var/run/gogoc(/.*)?		gen_context(system_u:object_r:gogoc_var_run_t,s0)
+
+/etc/gogoc(/.*)?            gen_context(system_u:object_r:gogoc_etc_t,s0)
diff --git a/gogoc.spec b/gogoc.spec
index 649c491..27d93b9 100644
--- a/gogoc.spec
+++ b/gogoc.spec
@@ -6,7 +6,7 @@
 
 Name:           gogoc
 Version:        1.2
-Release:        28%{?dist}
+Release:        29%{?dist}
 Summary:        IPv6 TSP client for gogo6
 
 Group:          System Environment/Daemons
@@ -168,6 +168,9 @@ fi
 %{_datadir}/selinux/*/%{modulename}.pp
 
 %changelog
+* Sun Aug 18 2013 Juan Orti Alcaine <jorti at fedoraproject.org> - 1.2-29
+- Add SELinux gogoc_etc_t type
+
 * Tue Aug 13 2013 Juan Orti Alcaine <jorti at fedoraproject.org> - 1.2-28
 - Add SELinux policy
 - Use PID file and systemctl to stop radvd
diff --git a/gogoc.te b/gogoc.te
index a358728..78a22c7 100644
--- a/gogoc.te
+++ b/gogoc.te
@@ -1,4 +1,4 @@
-policy_module(gogoc, 1.0.0)
+policy_module(gogoc, 1.0.1)
 
 require {
         type gogoc_t;
@@ -37,6 +37,9 @@ files_type(gogoc_var_lib_t)
 type gogoc_var_run_t;
 files_pid_file(gogoc_var_run_t)
 
+type gogoc_etc_t;
+files_config_file(gogoc_etc_t)
+
 type gogoc_unit_file_t;
 systemd_unit_file(gogoc_unit_file_t)
 
@@ -75,6 +78,11 @@ manage_files_pattern(gogoc_t, gogoc_var_run_t, gogoc_var_run_t)
 manage_lnk_files_pattern(gogoc_t, gogoc_var_run_t, gogoc_var_run_t)
 files_pid_filetrans(gogoc_t, gogoc_var_run_t, { dir file lnk_file })
 
+manage_dirs_pattern(gogoc_t, gogoc_etc_t, gogoc_etc_t)
+manage_files_pattern(gogoc_t, gogoc_etc_t, gogoc_etc_t)
+manage_lnk_files_pattern(gogoc_t, gogoc_etc_t, gogoc_etc_t)
+files_etc_filetrans(gogoc_t, gogoc_etc_t, { dir file lnk_file })
+
 corenet_all_recvfrom_unlabeled(gogoc_t)
 corenet_rw_tun_tap_dev(gogoc_t)
 corenet_tcp_sendrecv_generic_if(gogoc_t)


More information about the scm-commits mailing list