RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fixes from testing

This commit is contained in:
Chris PeBenito 2005-10-27 13:37:36 +00:00
parent 4614e83fbb
commit 5abea9818a
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
refpolicy/policy/modules/services/nis.te
View File

@ -50,7 +50,7 @@ allow ypbind_t ypbind_tmp_t:dir create_dir_perms;
allow ypbind_t ypbind_tmp_t:file create_file_perms;
files_create_tmp_files(ypbind_t, ypbind_tmp_t, { file dir })
allow ypbind_t ypbind_var_run_t:file { getattr create read write append setattr unlink };
allow ypbind_t ypbind_var_run_t:file manage_file_perms;
files_create_pid(ypbind_t,ypbind_var_run_t)
allow ypbind_t var_yp_t:dir rw_dir_perms;
@ -89,6 +89,7 @@ term_dontaudit_use_console(ypbind_t)
domain_use_wide_inherit_fd(ypbind_t)
files_read_etc_files(ypbind_t)
files_list_var(ypbind_t)
init_use_fd(ypbind_t)
init_use_script_pty(ypbind_t)
@ -155,8 +156,8 @@ allow ypserv_t ypserv_tmp_t:dir create_dir_perms;
allow ypserv_t ypserv_tmp_t:file create_file_perms;
files_create_tmp_files(ypserv_t, ypserv_tmp_t, { file dir })
allow ypserv_t ypserv_var_run_t:dir { ioctl read write getattr lock add_name remove_name search };
allow ypserv_t ypserv_var_run_t:file { getattr create read write append setattr unlink };
allow ypserv_t ypserv_var_run_t:dir rw_dir_perms;
allow ypserv_t ypserv_var_run_t:file manage_file_perms;
files_create_pid(ypserv_t,ypserv_var_run_t)
kernel_read_kernel_sysctl(ypserv_t)
@ -189,6 +190,8 @@ corecmd_exec_bin(ypserv_t)
domain_use_wide_inherit_fd(ypserv_t)
files_read_var_files(ypserv_t)
init_use_fd(ypserv_t)
init_use_script_pty(ypserv_t)
init_udp_sendto_script(ypserv_t)