RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

setroubleshoot has a plugin that checks the file context on disk versus a matchpathcon. So needs additional privs

This commit is contained in:
Chris PeBenito 2007-03-06 17:16:08 +00:00
parent c23eb5b1c4
commit 7aca2aa827
2 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
Changelog
View File

@ -1,3 +1,4 @@
- Patch for setroubleshoot for validating file contexts from Dan Walsh.
- Patch for gssd fixes from Dan Walsh. - Patch for gssd fixes from Dan Walsh.
- Patch for lvm fixes from Dan Walsh. - Patch for lvm fixes from Dan Walsh.
- Patch for ricci fixes from Dan Walsh. - Patch for ricci fixes from Dan Walsh.

7
policy/modules/services/setroubleshoot.te
View File

@ -1,5 +1,5 @@
policy_module(setroubleshoot,1.2.1) policy_module(setroubleshoot,1.2.2)
######################################## ########################################
# #
@ -74,8 +74,10 @@ domain_dontaudit_search_all_domains_state(setroubleshootd_t)
files_read_usr_files(setroubleshootd_t) files_read_usr_files(setroubleshootd_t)
files_read_etc_files(setroubleshootd_t) files_read_etc_files(setroubleshootd_t)
files_getattr_all_dirs(setroubleshootd_t) files_getattr_all_dirs(setroubleshootd_t)
files_getattr_all_files(setroubleshootd_t)
selinux_get_enforce_mode(setroubleshootd_t) selinux_get_enforce_mode(setroubleshootd_t)
selinux_validate_context(setroubleshootd_t)
term_dontaudit_use_console(setroubleshootd_t) term_dontaudit_use_console(setroubleshootd_t)
term_dontaudit_use_all_user_ptys(setroubleshootd_t) term_dontaudit_use_all_user_ptys(setroubleshootd_t)
@ -97,9 +99,12 @@ logging_send_syslog_msg(setroubleshootd_t)
logging_stream_connect_auditd(setroubleshootd_t) logging_stream_connect_auditd(setroubleshootd_t)
seutil_read_config(setroubleshootd_t) seutil_read_config(setroubleshootd_t)
seutil_read_file_contexts(setroubleshootd_t)
sysnet_read_config(setroubleshootd_t) sysnet_read_config(setroubleshootd_t)
userdom_dontaudit_read_sysadm_home_content_files(setroubleshootd_t)
ifdef(`targeted_policy',` ifdef(`targeted_policy',`
term_dontaudit_use_generic_ptys(setroubleshootd_t) term_dontaudit_use_generic_ptys(setroubleshootd_t)
term_dontaudit_use_unallocated_ttys(setroubleshootd_t) term_dontaudit_use_unallocated_ttys(setroubleshootd_t)