RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Allow the sysadm domain to execute rc 

The /sbin/rc binary is used by the system administrator to manage
runlevels (add/delete), check runlevel state, etc. all which do not
require a transition to occur. Hence the /sbin/rc (now labeled
rc_exec_t) is allowed to be executed without transitioning.

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
This commit is contained in:
Sven Vermeulen 2011-09-03 16:21:09 +02:00 committed by Chris PeBenito
parent c5cbefb892
commit 706d503e5b
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
policy/modules/roles/sysadm.te
View File

@ -51,6 +51,10 @@ ifdef(`direct_sysadm_daemon',`
') ')
') ')
ifdef(`distro_gentoo',`
init_rc_exec(sysadm_t)
')
ifndef(`enable_mls',` ifndef(`enable_mls',`
logging_manage_audit_log(sysadm_t) logging_manage_audit_log(sysadm_t)
logging_manage_audit_config(sysadm_t) logging_manage_audit_config(sysadm_t)