RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

knot: Whitespace changes. 

Signed-off-by: Chris PeBenito <pebenito@ieee.org>
This commit is contained in:
Chris PeBenito 2019-07-13 14:03:46 -04:00
parent 491ae9991a
commit 7a1260ffe3
2 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
policy/modules/services/knot.te
View File

@ -36,6 +36,7 @@ files_tmp_file(knot_tmp_t)
# #
# knotd local policy # knotd local policy
# #
allow knotd_t self:capability { dac_override dac_read_search setgid setpcap setuid }; allow knotd_t self:capability { dac_override dac_read_search setgid setpcap setuid };
allow knotd_t self:process { signal_perms getcap getsched setsched }; allow knotd_t self:process { signal_perms getcap getsched setsched };
allow knotd_t self:tcp_socket create_stream_socket_perms; allow knotd_t self:tcp_socket create_stream_socket_perms;
@ -44,7 +45,6 @@ allow knotd_t self:unix_stream_socket create_stream_socket_perms;
corenet_tcp_bind_generic_node(knotd_t) corenet_tcp_bind_generic_node(knotd_t)
corenet_udp_bind_generic_node(knotd_t) corenet_udp_bind_generic_node(knotd_t)
corenet_sendrecv_dns_server_packets(knotd_t) corenet_sendrecv_dns_server_packets(knotd_t)
corenet_tcp_bind_dns_port(knotd_t) corenet_tcp_bind_dns_port(knotd_t)
corenet_udp_bind_dns_port(knotd_t) corenet_udp_bind_dns_port(knotd_t)
@ -77,7 +77,6 @@ files_map_etc_files(knotd_t)
files_search_var_lib(knotd_t) files_search_var_lib(knotd_t)
fs_getattr_xattr_fs(knotd_t) fs_getattr_xattr_fs(knotd_t)
fs_getattr_tmpfs(knotd_t) fs_getattr_tmpfs(knotd_t)
auth_use_nsswitch(knotd_t) auth_use_nsswitch(knotd_t)
@ -90,6 +89,7 @@ miscfiles_read_localization(knotd_t)
# #
# knotc local policy # knotc local policy
# #
allow knotc_t self:capability { dac_override dac_read_search }; allow knotc_t self:capability { dac_override dac_read_search };
allow knotc_t self:process signal; allow knotc_t self:process signal;