[gogoc] Add gogoc_etc_t SELinux type
Juan Orti
jorti at fedoraproject.org
Sun Aug 18 13:59:56 UTC 2013
commit 5ecf02a6e928329ca3cedf34fd468ece498652cf
Author: Juan Orti Alcaine <jorti at fedoraproject.org>
Date: Sun Aug 18 15:59:17 2013 +0200
Add gogoc_etc_t SELinux type
gogoc.fc | 2 ++
gogoc.spec | 5 ++++-
gogoc.te | 10 +++++++++-
3 files changed, 15 insertions(+), 2 deletions(-)
---
diff --git a/gogoc.fc b/gogoc.fc
index 6293f13..e0eabce 100644
--- a/gogoc.fc
+++ b/gogoc.fc
@@ -7,3 +7,5 @@
/var/log/gogoc(/.*)? gen_context(system_u:object_r:gogoc_log_t,s0)
/var/run/gogoc(/.*)? gen_context(system_u:object_r:gogoc_var_run_t,s0)
+
+/etc/gogoc(/.*)? gen_context(system_u:object_r:gogoc_etc_t,s0)
diff --git a/gogoc.spec b/gogoc.spec
index 649c491..27d93b9 100644
--- a/gogoc.spec
+++ b/gogoc.spec
@@ -6,7 +6,7 @@
Name: gogoc
Version: 1.2
-Release: 28%{?dist}
+Release: 29%{?dist}
Summary: IPv6 TSP client for gogo6
Group: System Environment/Daemons
@@ -168,6 +168,9 @@ fi
%{_datadir}/selinux/*/%{modulename}.pp
%changelog
+* Sun Aug 18 2013 Juan Orti Alcaine <jorti at fedoraproject.org> - 1.2-29
+- Add SELinux gogoc_etc_t type
+
* Tue Aug 13 2013 Juan Orti Alcaine <jorti at fedoraproject.org> - 1.2-28
- Add SELinux policy
- Use PID file and systemctl to stop radvd
diff --git a/gogoc.te b/gogoc.te
index a358728..78a22c7 100644
--- a/gogoc.te
+++ b/gogoc.te
@@ -1,4 +1,4 @@
-policy_module(gogoc, 1.0.0)
+policy_module(gogoc, 1.0.1)
require {
type gogoc_t;
@@ -37,6 +37,9 @@ files_type(gogoc_var_lib_t)
type gogoc_var_run_t;
files_pid_file(gogoc_var_run_t)
+type gogoc_etc_t;
+files_config_file(gogoc_etc_t)
+
type gogoc_unit_file_t;
systemd_unit_file(gogoc_unit_file_t)
@@ -75,6 +78,11 @@ manage_files_pattern(gogoc_t, gogoc_var_run_t, gogoc_var_run_t)
manage_lnk_files_pattern(gogoc_t, gogoc_var_run_t, gogoc_var_run_t)
files_pid_filetrans(gogoc_t, gogoc_var_run_t, { dir file lnk_file })
+manage_dirs_pattern(gogoc_t, gogoc_etc_t, gogoc_etc_t)
+manage_files_pattern(gogoc_t, gogoc_etc_t, gogoc_etc_t)
+manage_lnk_files_pattern(gogoc_t, gogoc_etc_t, gogoc_etc_t)
+files_etc_filetrans(gogoc_t, gogoc_etc_t, { dir file lnk_file })
+
corenet_all_recvfrom_unlabeled(gogoc_t)
corenet_rw_tun_tap_dev(gogoc_t)
corenet_tcp_sendrecv_generic_if(gogoc_t)
More information about the scm-commits
mailing list