RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Seunshare patch from Dan Walsh.

This commit is contained in:
Chris PeBenito 2009-12-01 10:31:28 -05:00
parent d7776f58c2
commit 46b03739ac
2 changed files with 20 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
policy/modules/apps/seunshare.if
View File

@ -41,6 +41,14 @@ interface(`seunshare_run',`
seunshare_domtrans($1)
role $2 types seunshare_t;
allow $1 seunshare_t:process signal_perms;
ifdef(`hide_broken_symptoms', `
dontaudit seunshare_t $1:tcp_socket rw_socket_perms;
dontaudit seunshare_t $1:udp_socket rw_socket_perms;
dontaudit seunshare_t $1:unix_stream_socket rw_socket_perms;
')
')
########################################

14
policy/modules/apps/seunshare.te
View File

@ -1,5 +1,5 @@
policy_module(seunshare, 1.0.0)
policy_module(seunshare, 1.0.1)
########################################
#
@ -16,7 +16,7 @@ role system_r types seunshare_t;
# seunshare local policy
#
allow seunshare_t self:capability setpcap;
allow seunshare_t self:capability { setuid dac_override setpcap sys_admin };
allow seunshare_t self:process { setexec signal getcap setcap };
allow seunshare_t self:fifo_file rw_file_perms;
@ -30,6 +30,16 @@ files_mounton_all_poly_members(seunshare_t)
auth_use_nsswitch(seunshare_t)
logging_send_syslog_msg(seunshare_t)
miscfiles_read_localization(seunshare_t)
userdom_use_user_terminals(seunshare_t)
ifdef(`hide_broken_symptoms', `
fs_dontaudit_rw_anon_inodefs_files(seunshare_t)
optional_policy(`
mozilla_dontaudit_manage_user_home_files(seunshare_t)
')
')