[gogoc] Allow gogoc to manage log files in SELinux policy. Bug #1070235

Juan Orti jorti at fedoraproject.org
Wed Feb 26 14:48:22 UTC 2014


commit 7f9160b1f4bca0c0f9cf600089916873a9f16677
Author: Juan Orti Alcaine <j.orti.alcaine at gmail.com>
Date:   Wed Feb 26 15:49:06 2014 +0100

    Allow gogoc to manage log files in SELinux policy. Bug #1070235

 gogoc.spec |    5 ++++-
 gogoc.te   |    5 ++---
 2 files changed, 6 insertions(+), 4 deletions(-)
---
diff --git a/gogoc.spec b/gogoc.spec
index 80ac303..127c165 100644
--- a/gogoc.spec
+++ b/gogoc.spec
@@ -6,7 +6,7 @@
 
 Name:           gogoc
 Version:        1.2
-Release:        36%{?dist}
+Release:        37%{?dist}
 Summary:        IPv6 TSP client for gogo6
 
 Group:          System Environment/Daemons
@@ -182,6 +182,9 @@ fi
 %{_datadir}/selinux/*/%{name}.pp
 
 %changelog
+* Wed Feb 26 2014 Juan Orti Alcaine <jorti at fedoraproject.org> - 1.2-37
+- Allow gogoc to manage log files in SELinux policy. Bug #1070235
+
 * Mon Feb 17 2014 Juan Orti Alcaine <jorti at fedoraproject.org> - 1.2-36
 - Use iproute tools to configure tunnel. Bug #1063272
 
diff --git a/gogoc.te b/gogoc.te
index 2a4006b..3130bb3 100644
--- a/gogoc.te
+++ b/gogoc.te
@@ -1,4 +1,4 @@
-policy_module(gogoc, 1.0.5)
+policy_module(gogoc, 1.0.6)
 
 ########################################
 #
@@ -34,8 +34,7 @@ corenet_port(gogoc_port_t)
 #
 # gogoc local policy
 #
-create_files_pattern(gogoc_t, gogoc_log_t, gogoc_log_t)
-allow gogoc_t gogoc_log_t:file { append_file_perms read_file_perms setattr_file_perms };
+manage_files_pattern(gogoc_t, gogoc_log_t, gogoc_log_t)
 manage_files_pattern(gogoc_t, gogoc_var_lib_t, gogoc_var_lib_t)
 manage_files_pattern(gogoc_t, gogoc_var_run_t, gogoc_var_run_t)
 read_files_pattern(gogoc_t, gogoc_conf_t, gogoc_conf_t)


More information about the scm-commits mailing list