[gogoc] Allow gogoc to manage log files in SELinux policy. Bug #1070235
Juan Orti
jorti at fedoraproject.org
Wed Feb 26 14:48:22 UTC 2014
commit 7f9160b1f4bca0c0f9cf600089916873a9f16677
Author: Juan Orti Alcaine <j.orti.alcaine at gmail.com>
Date: Wed Feb 26 15:49:06 2014 +0100
Allow gogoc to manage log files in SELinux policy. Bug #1070235
gogoc.spec | 5 ++++-
gogoc.te | 5 ++---
2 files changed, 6 insertions(+), 4 deletions(-)
---
diff --git a/gogoc.spec b/gogoc.spec
index 80ac303..127c165 100644
--- a/gogoc.spec
+++ b/gogoc.spec
@@ -6,7 +6,7 @@
Name: gogoc
Version: 1.2
-Release: 36%{?dist}
+Release: 37%{?dist}
Summary: IPv6 TSP client for gogo6
Group: System Environment/Daemons
@@ -182,6 +182,9 @@ fi
%{_datadir}/selinux/*/%{name}.pp
%changelog
+* Wed Feb 26 2014 Juan Orti Alcaine <jorti at fedoraproject.org> - 1.2-37
+- Allow gogoc to manage log files in SELinux policy. Bug #1070235
+
* Mon Feb 17 2014 Juan Orti Alcaine <jorti at fedoraproject.org> - 1.2-36
- Use iproute tools to configure tunnel. Bug #1063272
diff --git a/gogoc.te b/gogoc.te
index 2a4006b..3130bb3 100644
--- a/gogoc.te
+++ b/gogoc.te
@@ -1,4 +1,4 @@
-policy_module(gogoc, 1.0.5)
+policy_module(gogoc, 1.0.6)
########################################
#
@@ -34,8 +34,7 @@ corenet_port(gogoc_port_t)
#
# gogoc local policy
#
-create_files_pattern(gogoc_t, gogoc_log_t, gogoc_log_t)
-allow gogoc_t gogoc_log_t:file { append_file_perms read_file_perms setattr_file_perms };
+manage_files_pattern(gogoc_t, gogoc_log_t, gogoc_log_t)
manage_files_pattern(gogoc_t, gogoc_var_lib_t, gogoc_var_lib_t)
manage_files_pattern(gogoc_t, gogoc_var_run_t, gogoc_var_run_t)
read_files_pattern(gogoc_t, gogoc_conf_t, gogoc_conf_t)
More information about the scm-commits
mailing list