RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

cyphesis patch from Dan Walsh

This commit is contained in:
Jeremy Solt 2010-08-30 10:56:54 -04:00 committed by Chris PeBenito
parent fee48647ac
commit 92f6d7cf64
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
policy/modules/services/cyphesis.te
View File

@ -32,13 +32,14 @@ allow cyphesis_t self:unix_dgram_socket create_socket_perms;
manage_files_pattern(cyphesis_t, cyphesis_log_t, cyphesis_log_t)
logging_log_filetrans(cyphesis_t, cyphesis_log_t, file)
# DAN > Does cyphesis really create a sock_file in /tmp? Why?
# DAN > Does cyphesis really create a sock_file in /tmp? Why?
allow cyphesis_t cyphesis_tmp_t:sock_file manage_sock_file_perms;
files_tmp_filetrans(cyphesis_t, cyphesis_tmp_t, file)
manage_dirs_pattern(cyphesis_t, cyphesis_var_run_t, cyphesis_var_run_t)
manage_files_pattern(cyphesis_t, cyphesis_var_run_t, cyphesis_var_run_t)
manage_sock_files_pattern(cyphesis_t, cyphesis_var_run_t, cyphesis_var_run_t)
files_pid_filetrans(cyphesis_t, cyphesis_var_run_t, { file sock_file })
files_pid_filetrans(cyphesis_t, cyphesis_var_run_t, { dir file sock_file })
kernel_read_system_state(cyphesis_t)
kernel_read_kernel_sysctls(cyphesis_t)