RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

knot: Whitespace changes. 

Signed-off-by: Chris PeBenito <pebenito@ieee.org>
This commit is contained in:
Chris PeBenito 2019-07-13 14:03:46 -04:00
parent 491ae9991a
commit 7a1260ffe3
2 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
policy/modules/services/knot.fc
View File

@ -1,11 +1,11 @@
/etc/rc\.d/init\.d/knot -- gen_context(system_u:object_r:knot_initrc_exec_t,s0)
/etc/knot(/.*)? gen_context(system_u:object_r:knot_conf_t,s0)
/etc/knot(/.*)? gen_context(system_u:object_r:knot_conf_t,s0)
/usr/sbin/knotd -- gen_context(system_u:object_r:knotd_exec_t,s0)
/usr/sbin/knotc -- gen_context(system_u:object_r:knotc_exec_t,s0)
/var/lib/knot(/.*)? gen_context(system_u:object_r:knot_var_lib_t,s0)
/var/lib/knot(/.*)? gen_context(system_u:object_r:knot_var_lib_t,s0)
/run/knot(/.*)? gen_context(system_u:object_r:knot_runtime_t,s0)
/run/knot(/.*)? gen_context(system_u:object_r:knot_runtime_t,s0)

4
policy/modules/services/knot.te
View File

@ -36,6 +36,7 @@ files_tmp_file(knot_tmp_t)
#
# knotd local policy
#
allow knotd_t self:capability { dac_override dac_read_search setgid setpcap setuid };
allow knotd_t self:process { signal_perms getcap getsched setsched };
allow knotd_t self:tcp_socket create_stream_socket_perms;
@ -44,7 +45,6 @@ allow knotd_t self:unix_stream_socket create_stream_socket_perms;
corenet_tcp_bind_generic_node(knotd_t)
corenet_udp_bind_generic_node(knotd_t)
corenet_sendrecv_dns_server_packets(knotd_t)
corenet_tcp_bind_dns_port(knotd_t)
corenet_udp_bind_dns_port(knotd_t)
@ -77,7 +77,6 @@ files_map_etc_files(knotd_t)
files_search_var_lib(knotd_t)
fs_getattr_xattr_fs(knotd_t)
fs_getattr_tmpfs(knotd_t)
auth_use_nsswitch(knotd_t)
@ -90,6 +89,7 @@ miscfiles_read_localization(knotd_t)
#
# knotc local policy
#
allow knotc_t self:capability { dac_override dac_read_search };
allow knotc_t self:process signal;