RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Afs needs sys_admin, sends signals, and resolves hostnames from Dan Walsh

This commit is contained in:
Jeremy Solt 2010-03-22 13:25:07 -04:00 committed by Chris PeBenito
parent df29613c72
commit 1d348bd253
2 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/services/afs.if
View File

@ -94,7 +94,7 @@ interface(`afs_initrc_domtrans',`
#
interface(`afs_admin',`
gen_require(`
type afs_t;
type afs_t, afs_initrc_exec_t;
')
allow $1 afs_t:process { ptrace signal_perms getattr };

6
policy/modules/services/afs.te
View File

@ -71,8 +71,8 @@ role system_r types afs_vlserver_t;
# afs client local policy
#
allow afs_t self:capability { sys_nice sys_tty_config };
allow afs_t self:process setsched;
allow afs_t self:capability { sys_admin sys_nice sys_tty_config };
allow afs_t self:process { setsched signal };
allow afs_t self:udp_socket create_socket_perms;
allow afs_t self:fifo_file rw_file_perms;
allow afs_t self:unix_stream_socket create_stream_socket_perms;
@ -105,6 +105,8 @@ logging_send_syslog_msg(afs_t)
miscfiles_read_localization(afs_t)
sysnet_dns_name_resolve(afs_t)
########################################
#
# AFS bossserver local policy