RepoMirrors/selinux-refpolicy
1
0
Fork 0
mirror of https://github.com/SELinuxProject/refpolicy synced 2025-03-30 15:26:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

policy/modules/services/cvs.te: make inetd optional

Browse Source 
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
This commit is contained in:
Fabrice Fontaine 2021-08-06 16:33:36 +02:00
parent b09c03f7dd
commit db73b1dd90
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
policy/modules/services/cvs.te
View File

@ -15,7 +15,6 @@ gen_tunable(allow_cvs_read_shadow, false)
type cvs_t; type cvs_t;
type cvs_exec_t; type cvs_exec_t;
inetd_tcp_service_domain(cvs_t, cvs_exec_t)
init_daemon_domain(cvs_t, cvs_exec_t) init_daemon_domain(cvs_t, cvs_exec_t)
application_executable_file(cvs_exec_t) application_executable_file(cvs_exec_t)
@ -98,6 +97,10 @@ tunable_policy(`allow_cvs_read_shadow',`
auth_tunable_read_shadow(cvs_t) auth_tunable_read_shadow(cvs_t)
') ')
optional_policy(`
inetd_tcp_service_domain(cvs_t, cvs_exec_t)
')
optional_policy(` optional_policy(`
kerberos_read_config(cvs_t) kerberos_read_config(cvs_t)
kerberos_read_keytab(cvs_t) kerberos_read_keytab(cvs_t)