From 5ed061769ebdce06e56fb7131674b2bc382ca05b Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Tue, 24 Nov 2009 11:47:12 -0500 Subject: [PATCH] Application patch from Dan Walsh. --- policy/modules/system/application.if | 20 +++++++++++++++++++- policy/modules/system/application.te | 6 +++++- 2 files changed, 24 insertions(+), 2 deletions(-) diff --git a/policy/modules/system/application.if b/policy/modules/system/application.if index 8e4b8c221..06e7b0a87 100644 --- a/policy/modules/system/application.if +++ b/policy/modules/system/application.if @@ -99,5 +99,23 @@ interface(`application_exec_all',` interface(`application_domain',` application_type($1) application_executable_file($2) - domain_entry_file($1,$2) + domain_entry_file($1, $2) +') + +######################################## +## +## Send signull to all application domains. +## +## +## +## Domain allowed access. +## +## +# +interface(`application_signull',` + gen_require(` + attribute application_domain_type; + ') + + allow $1 application_domain_type:process signull; ') diff --git a/policy/modules/system/application.te b/policy/modules/system/application.te index c80f2cea1..5fa76a69a 100644 --- a/policy/modules/system/application.te +++ b/policy/modules/system/application.te @@ -1,5 +1,5 @@ -policy_module(application, 1.1.0) +policy_module(application, 1.1.1) # Attribute of user applications attribute application_domain_type; @@ -11,3 +11,7 @@ optional_policy(` ssh_sigchld(application_domain_type) ssh_rw_stream_sockets(application_domain_type) ') + +optional_policy(` + sudo_sigchld(application_domain_type) +')