avc: smartcard token login

Dominick Grift domg472 at gmail.com
Sun Dec 5 20:59:57 UTC 2010


Reference: 
http://lists.fedoraproject.org/pipermail/selinux/2010-December/013294.html

This may be more appropriate if other login programs need this as well.

Signed-off-by: Dominick Grift <domg472 at gmail.com>
---
:100644 100644 6521109... ceadd00... M	policy/modules/system/authlogin.if
 policy/modules/system/authlogin.if |    6 ++++++
 1 files changed, 6 insertions(+), 0 deletions(-)

diff --git a/policy/modules/system/authlogin.if b/policy/modules/system/authlogin.if
index 6521109..ceadd00 100644
--- a/policy/modules/system/authlogin.if
+++ b/policy/modules/system/authlogin.if
@@ -189,6 +189,12 @@ interface(`auth_login_pgm_domain',`
 	')
 
 	optional_policy(`
+		openct_stream_connect($1)
+		openct_signull($1)
+		openct_read_pid_files($1)
+	')
+
+	optional_policy(`
 		corecmd_exec_bin($1)
 		storage_getattr_fixed_disk_dev($1)
 		mount_domtrans($1)
-- 
1.7.3.2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/selinux/attachments/20101205/21185c7b/attachment.bin 


More information about the selinux mailing list