RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update entropyd_t with privileges needed for haveged 

Haveged by itself requires a few additional privileges (create a unix socket
and write access to some proc/sys/kernel files (like
/proc/sys/kernel/random/write_wakeup_threshold).

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
This commit is contained in:
Sven Vermeulen 2011-07-20 21:00:08 +02:00 committed by Chris PeBenito
parent 34aea93484
commit 62cdea27c3
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
policy/modules/services/audioentropy.te
View File

@ -27,11 +27,12 @@ files_pid_file(entropyd_var_run_t)
allow entropyd_t self:capability { dac_override ipc_lock sys_admin }; allow entropyd_t self:capability { dac_override ipc_lock sys_admin };
dontaudit entropyd_t self:capability sys_tty_config; dontaudit entropyd_t self:capability sys_tty_config;
allow entropyd_t self:process signal_perms; allow entropyd_t self:process signal_perms;
allow entropyd_t self:unix_dgram_socket create_socket_perms;
manage_files_pattern(entropyd_t, entropyd_var_run_t, entropyd_var_run_t) manage_files_pattern(entropyd_t, entropyd_var_run_t, entropyd_var_run_t)
files_pid_filetrans(entropyd_t, entropyd_var_run_t, file) files_pid_filetrans(entropyd_t, entropyd_var_run_t, file)
kernel_read_kernel_sysctls(entropyd_t) kernel_rw_kernel_sysctl(entropyd_t)
kernel_list_proc(entropyd_t) kernel_list_proc(entropyd_t)
kernel_read_proc_symlinks(entropyd_t) kernel_read_proc_symlinks(entropyd_t)