diff --git a/policy/modules/services/nscd.if b/policy/modules/services/nscd.if index 3b5d2a184..beed4c566 100644 --- a/policy/modules/services/nscd.if +++ b/policy/modules/services/nscd.if @@ -234,6 +234,24 @@ interface(`nscd_run',` role $2 types nscd_t; ') +######################################## +## +## Execute the nscd server init script. +## +## +## +## Domain allowed access. +## +## +# +interface(`nscd_initrc_domtrans',` + gen_require(` + type nscd_initrc_exec_t; + ') + + init_labeled_script_domtrans($1, nscd_initrc_exec_t) +') + ######################################## ## ## All of the rules required to administrate diff --git a/policy/modules/services/nscd.te b/policy/modules/services/nscd.te index 9b5092267..afbd2be20 100644 --- a/policy/modules/services/nscd.te +++ b/policy/modules/services/nscd.te @@ -1,5 +1,5 @@ -policy_module(nscd, 1.9.1) +policy_module(nscd, 1.9.2) gen_require(` class nscd all_nscd_perms; @@ -65,6 +65,7 @@ dev_read_urand(nscd_t) fs_getattr_all_fs(nscd_t) fs_search_auto_mountpoints(nscd_t) +fs_list_inotifyfs(nscd_t) # for when /etc/passwd has just been updated and has the wrong type auth_getattr_shadow(nscd_t)