RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix ordering in raid.

This commit is contained in:
Chris PeBenito 2009-08-05 10:19:28 -04:00
parent 4b218bd646
commit 48bf6397fc
1 changed files with 12 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
policy/modules/system/raid.te
View File

@ -32,6 +32,10 @@ kernel_read_kernel_sysctls(mdadm_t)
kernel_rw_software_raid_state(mdadm_t) kernel_rw_software_raid_state(mdadm_t)
kernel_getattr_core_if(mdadm_t) kernel_getattr_core_if(mdadm_t)
# Helper program access
corecmd_exec_bin(mdadm_t)
corecmd_exec_shell(mdadm_t)
dev_read_sysfs(mdadm_t) dev_read_sysfs(mdadm_t)
# Ignore attempts to read every device file # Ignore attempts to read every device file
dev_dontaudit_getattr_all_blk_files(mdadm_t) dev_dontaudit_getattr_all_blk_files(mdadm_t)
@ -41,28 +45,24 @@ dev_dontaudit_getattr_generic_chr_files(mdadm_t)
dev_dontaudit_getattr_generic_blk_files(mdadm_t) dev_dontaudit_getattr_generic_blk_files(mdadm_t)
dev_read_realtime_clock(mdadm_t) dev_read_realtime_clock(mdadm_t)
domain_use_interactive_fds(mdadm_t)
files_read_etc_files(mdadm_t)
files_read_etc_runtime_files(mdadm_t)
fs_search_auto_mountpoints(mdadm_t) fs_search_auto_mountpoints(mdadm_t)
fs_dontaudit_list_tmpfs(mdadm_t) fs_dontaudit_list_tmpfs(mdadm_t)
mls_file_read_all_levels(mdadm_t)
mls_file_write_all_levels(mdadm_t)
# RAID block device access # RAID block device access
storage_manage_fixed_disk(mdadm_t) storage_manage_fixed_disk(mdadm_t)
storage_dev_filetrans_fixed_disk(mdadm_t) storage_dev_filetrans_fixed_disk(mdadm_t)
storage_read_scsi_generic(mdadm_t) storage_read_scsi_generic(mdadm_t)
mls_file_read_all_levels(mdadm_t)
mls_file_write_all_levels(mdadm_t)
term_dontaudit_list_ptys(mdadm_t) term_dontaudit_list_ptys(mdadm_t)
# Helper program access
corecmd_exec_bin(mdadm_t)
corecmd_exec_shell(mdadm_t)
domain_use_interactive_fds(mdadm_t)
files_read_etc_files(mdadm_t)
files_read_etc_runtime_files(mdadm_t)
init_dontaudit_getattr_initctl(mdadm_t) init_dontaudit_getattr_initctl(mdadm_t)
logging_send_syslog_msg(mdadm_t) logging_send_syslog_msg(mdadm_t)