nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #562 from montjoie/smartmon-drivedbh

Browse Source 
fstools: handle gentoo place for drivedb.h
This commit is contained in:
Chris PeBenito 2022-12-13 10:01:17 -05:00 committed by GitHub
commit 3c93ad9d70
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
policy/modules/system/fstools.fc
View File

@ -108,6 +108,10 @@
/usr/sbin/zstreamdump -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/sbin/zstreamdump -- gen_context(system_u:object_r:fsadm_exec_t,s0)
/usr/sbin/ztest -- gen_context(system_u:object_r:fsadm_exec_t,s0) /usr/sbin/ztest -- gen_context(system_u:object_r:fsadm_exec_t,s0)
ifdef(`distro_gentoo',`
/var/db/smartmontools(/.*)? gen_context(system_u:object_r:fsadm_db_t,s0)
')
/var/swap -- gen_context(system_u:object_r:swapfile_t,s0) /var/swap -- gen_context(system_u:object_r:swapfile_t,s0)
/var/log/fsck(/.*)? gen_context(system_u:object_r:fsadm_log_t,s0) /var/log/fsck(/.*)? gen_context(system_u:object_r:fsadm_log_t,s0)

9
policy/modules/system/fstools.te
View File

@ -19,6 +19,11 @@ files_tmp_file(fsadm_tmp_t)
type fsadm_run_t; type fsadm_run_t;
files_runtime_file(fsadm_run_t) files_runtime_file(fsadm_run_t)
ifdef(`distro_gentoo',`
type fsadm_db_t;
files_type(fsadm_db_t)
')
type swapfile_t; # customizable type swapfile_t; # customizable
files_type(swapfile_t) files_type(swapfile_t)
@ -55,6 +60,10 @@ allow fsadm_t fsadm_run_t:dir manage_dir_perms;
allow fsadm_t fsadm_run_t:file manage_file_perms; allow fsadm_t fsadm_run_t:file manage_file_perms;
files_runtime_filetrans(fsadm_t, fsadm_run_t, dir) files_runtime_filetrans(fsadm_t, fsadm_run_t, dir)
ifdef(`distro_gentoo',`
manage_files_pattern(fsadm_t, fsadm_db_t, fsadm_db_t)
')
# log files # log files
allow fsadm_t fsadm_log_t:dir setattr; allow fsadm_t fsadm_log_t:dir setattr;
manage_files_pattern(fsadm_t, fsadm_log_t, fsadm_log_t) manage_files_pattern(fsadm_t, fsadm_log_t, fsadm_log_t)