dc663fe40a
Introduce init_daemon_run_dir transformation
...
Due to the introduction of /run, many init scripts need to create the daemon run
dirs (such as /run/udev for the udev init script). To simplify this, we
introduce the "daemonrundir" attribute to which initrc_t has the necessary
create_dirs_perms granted. Because it often needs to change the attributes or
ownership of the directories as well, we also grant the setattr rights on the
directory.
Then, when needed, the modules can call this interface while adding the name of
the directory. This will trigger a named file transition when initrc_t creates
this directory:
init_daemon_run_dir(udev_var_run_t, "udev")
will trigger
files_pid_filetrans(initrc_t, udev_var_run_t, dir, "udev")
Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-08-29 08:45:17 -04:00
4f24b1841c
Add optional name for kernel and system filetrans interfaces.
2012-05-10 09:53:45 -04:00
6cd8334d12
Whitespace fixes in portage and init.
2011-09-06 14:00:58 -04:00
ca4d39d31c
Rename init_rc_exec() to init_exec_rc().
2011-09-06 13:58:04 -04:00
bce639cff4
Introduce rc_exec_t as file entry for initrc_t
...
Within Gentoo, the init system (openrc) uses a single binary (/sbin/rc)
for all its functions, be it executing init scripts, managing runlevels,
checking state, etc. This binary is not allowed to be labeled
initrc_exec_t as that would trigger domain transitions where this isn't
necessary (or even allowed).
A suggested solution is to use a separate type declaration for /sbin/rc
(rc_exec_t) which transitions where necessary.
This patch includes support for the /sbin/rc rc_exec_t type and declares
the init_rc_exec() interface which allows domains to execute the binary
without transitioning.
Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2011-09-06 13:22:22 -04:00
3979c6886f
Fix init_system_domain() description, pointed out by Elia Pinto.
2011-04-27 10:42:47 -04:00
756c96b541
Fix incorrect dependenices in init module interfaces (init_t as an attribute rather than type).
2011-01-31 14:08:11 -05:00
7c4fbeba94
Fixes for samhain init_system_domain() usage.
2010-12-16 09:03:51 -05:00
7a15ba8bae
Whitespace fixes in init.
2010-12-15 14:50:28 -05:00
8d387b3228
Rename init_search_script_key() to init_search_script_keys().
2010-10-11 09:36:31 -04:00
b21846594d
su: wants to read inits script keyring.
...
Signed-off-by: Dominick Grift <domg472@gmail.com>
2010-10-11 09:30:54 -04:00
5718c0a59a
shutdown: needs to connect to init with a unix stream socket.
...
Signed-off-by: Dominick Grift <domg472@gmail.com>
2010-10-07 12:38:07 -04:00
a0546c9d1c
System layer xml fixes.
...
Signed-off-by: Dominick Grift <domg472@gmail.com>
2010-08-05 09:25:55 -04:00
ddd786e404
Init patch from Dan Walsh.
2010-03-18 10:19:49 -04:00
13f000d2ef
Improve the documentation of:
...
init_script_file()
init_daemon_domain()
init_system_domain()
init_ranged_daemon_domain()
init_ranged_system_domain()
init_use_fds()
2010-02-25 16:00:58 -05:00
2c05132062
Utmp fix from Gentoo.
2010-02-17 20:31:46 -05:00
e6d8fd1e50
additional cleanup for e877913.
2009-11-11 11:28:50 -05:00
e8779130bf
adding puppet configuration management system
...
Signed-off-by: Craig Grube <Craig.Grube@cobham.com>
Signed-off-by: Chris PeBenito <cpebenito@tresys.com>
2009-11-11 08:37:16 -05:00
3f67f722bb
trunk: whitespace fixes
2009-06-26 14:40:13 +00:00
ff8f0a63f4
trunk: whitespace fixes in xml blocks.
2008-12-03 19:16:20 +00:00
296273a719
trunk: merge UBAC.
2008-11-05 16:10:46 +00:00
82d2775c92
trunk: more open perm fixes.
2008-10-20 16:10:42 +00:00
88cf0a9c2b
trunk: whitespace fix; collapse multiple blank lines into one.
2008-10-17 15:29:51 +00:00
0b36a2146e
trunk: Enable open permission checks policy capability.
2008-10-16 16:09:20 +00:00
64c5b9975b
trunk: add interface to transition to initrc_t on labeled init scripts.
2008-09-18 13:47:43 +00:00
36095d11ce
trunk: kudzu and mta patches from dan.
2008-09-12 14:18:20 +00:00
6cc3f35635
trunk: first part of init script labeling support.
2008-08-29 19:00:02 +00:00
dc1920b218
trunk: Database labeled networking update from KaiGai Kohei.
2008-07-25 04:07:09 +00:00
4459a7c086
trunk: update init_telinit() for upstart's datagram socket usage instead of pipe useage.
2008-07-15 15:33:51 +00:00
3ece11804e
trunk: fix init_ranged_system_domain range_transition object class, from james carter.
2007-10-29 22:09:53 +00:00
350b6ab767
trunk: merge strict and targeted policies. merge shlib_t into lib_t.
2007-10-02 16:04:50 +00:00
2d0c9cecaf
trunk: several MLS enhancements.
2007-08-20 15:15:03 +00:00
d46cfe45cd
trunk: add application module
2007-07-19 18:57:48 +00:00
38d0cf1b8a
trunk: long overdue cleanup from when range_transitions were only in the base module
2007-05-14 15:35:47 +00:00
d28e528b0d
Fixes for RHEL4 from the CLIP project.
2007-04-27 15:08:15 +00:00
8021cb4f63
Merge sbin_t and ls_exec_t into bin_t.
2007-03-23 23:24:59 +00:00
ab514d6a89
remove disable_trans booleans
2007-03-23 21:01:49 +00:00
a5f5eba459
Add dontaudits for init fds and console to init_daemon_domain().
2007-03-20 18:47:18 +00:00
ca448bd66c
add init_exec() to init_telinit().
2007-02-26 20:19:53 +00:00
c0868a7a3b
merge policy patterns to trunk
2006-12-12 20:08:08 +00:00
ed38ca9f3d
fixes from gentoo strict testing:
...
- Allow semanage to read from /root on strict non-MLS for
local policy modules.
- Gentoo init script fixes for udev.
- Allow udev to read kernel modules.inputmap.
- Dnsmasq fixes from testing.
- Allow kernel NFS server to getattr filesystems so df can work
on clients.
2006-11-13 03:24:07 +00:00
93ddc66983
change transition from run_init to initrc to spec.
2006-10-09 18:52:19 +00:00
e070dd2df0
- Move range transitions to modules.
...
- Make number of MLS sensitivities, and number of MLS and MCS
categories configurable as build options.
2006-10-04 17:25:34 +00:00
693d4aedb5
patch from dan Fri, 22 Sep 2006 16:30:34 -0400
2006-09-25 18:53:06 +00:00
bbcd3c97dd
add main part of role-o-matic
2006-09-06 22:07:25 +00:00
33c7e6b4e8
remove dead selopt rules
2006-08-15 20:00:58 +00:00
497da0953c
ps/ptrace dontaudit cleanup
2006-08-08 17:49:03 +00:00
17de1b790b
remove extra level of directory
2006-07-12 20:32:27 +00:00
Sven Vermeulen
Chris PeBenito
Chris PeBenito
Dominick Grift
Craig Grube