From d2acef78f4dd3304c66f92b08ea25d9bfd115396 Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Fri, 8 Jan 2010 10:36:49 -0500 Subject: [PATCH] Inetd patch from Dan Walsh. --- policy/modules/kernel/corenetwork.te.in | 3 ++- policy/modules/services/inetd.fc | 2 +- policy/modules/services/inetd.te | 6 +++++- 3 files changed, 8 insertions(+), 3 deletions(-) diff --git a/policy/modules/kernel/corenetwork.te.in b/policy/modules/kernel/corenetwork.te.in index df59b539e..0382b5d04 100644 --- a/policy/modules/kernel/corenetwork.te.in +++ b/policy/modules/kernel/corenetwork.te.in @@ -1,5 +1,5 @@ -policy_module(corenetwork, 1.13.1) +policy_module(corenetwork, 1.13.2) ######################################## # @@ -100,6 +100,7 @@ network_port(ftp, tcp,21,s0) network_port(ftp_data, tcp,20,s0) network_port(gatekeeper, udp,1718,s0, udp,1719,s0, tcp,1721,s0, tcp,7000,s0) network_port(giftd, tcp,1213,s0) +network_port(git, tcp,9418,s0, udp,9418,s0) network_port(gopher, tcp,70,s0, udp,70,s0) network_port(gpsd, tcp,2947,s0) network_port(hddtemp, tcp,7634,s0) diff --git a/policy/modules/services/inetd.fc b/policy/modules/services/inetd.fc index a43de4670..39d5baa2e 100644 --- a/policy/modules/services/inetd.fc +++ b/policy/modules/services/inetd.fc @@ -9,4 +9,4 @@ /var/log/(x)?inetd\.log -- gen_context(system_u:object_r:inetd_log_t,s0) -/var/run/inetd\.pid -- gen_context(system_u:object_r:inetd_var_run_t,s0) +/var/run/(x)?inetd\.pid -- gen_context(system_u:object_r:inetd_var_run_t,s0) diff --git a/policy/modules/services/inetd.te b/policy/modules/services/inetd.te index 67bc7252c..66788d3a6 100644 --- a/policy/modules/services/inetd.te +++ b/policy/modules/services/inetd.te @@ -1,5 +1,5 @@ -policy_module(inetd, 1.10.0) +policy_module(inetd, 1.10.1) ######################################## # @@ -104,6 +104,8 @@ corenet_udp_bind_swat_port(inetd_t) corenet_tcp_bind_telnetd_port(inetd_t) corenet_udp_bind_tftp_port(inetd_t) corenet_tcp_bind_ssh_port(inetd_t) +corenet_tcp_bind_git_port(inetd_t) +corenet_udp_bind_git_port(inetd_t) # service port packets: corenet_sendrecv_amanda_server_packets(inetd_t) @@ -138,6 +140,8 @@ domain_use_interactive_fds(inetd_t) files_read_etc_files(inetd_t) files_read_etc_runtime_files(inetd_t) +auth_use_nsswitch(inetd_t) + logging_send_syslog_msg(inetd_t) miscfiles_read_localization(inetd_t)