RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

add priv_system_role

This commit is contained in:
Chris PeBenito 2005-09-21 14:47:31 +00:00
parent 0e15cdfb50
commit 11ba8e66a3
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
docs/macro_conversion_guide
View File

@ -117,6 +117,11 @@ domain_role_change_exempt($1)
# #
domain_subj_id_change_exempt($1) domain_subj_id_change_exempt($1)
#
# priv_system_role: complete
#
domain_system_change_exempt($1)
# #
# sysadmfile: complete # sysadmfile: complete
# #
@ -740,8 +745,6 @@ allow $1_t self:tcp_socket connected_stream_socket_perms;
# cjp: this should probably only be inetd_child rules? # cjp: this should probably only be inetd_child rules?
allow $1_t self:netlink_tcpdiag_socket r_netlink_socket_perms; allow $1_t self:netlink_tcpdiag_socket r_netlink_socket_perms;
allow $1_t self:capability { setuid setgid }; allow $1_t self:capability { setuid setgid };
allow $1_t self:dir search;
allow $1_t self:{ lnk_file file } { getattr read };
files_search_home($1_t) files_search_home($1_t)
optional_policy(`kerberos.te',` optional_policy(`kerberos.te',`
kerberos_use($1_t) kerberos_use($1_t)