RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Afs needs sys_admin, sends signals, and resolves hostnames from Dan Walsh

This commit is contained in:
Jeremy Solt 2010-03-22 13:25:07 -04:00 committed by Chris PeBenito
parent df29613c72
commit 1d348bd253
2 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/services/afs.if
View File

@ -94,7 +94,7 @@ interface(`afs_initrc_domtrans',`
# #
interface(`afs_admin',` interface(`afs_admin',`
gen_require(` gen_require(`
type afs_t; type afs_t, afs_initrc_exec_t;
') ')
allow $1 afs_t:process { ptrace signal_perms getattr }; allow $1 afs_t:process { ptrace signal_perms getattr };

6
policy/modules/services/afs.te
View File

@ -71,8 +71,8 @@ role system_r types afs_vlserver_t;
# afs client local policy # afs client local policy
# #
allow afs_t self:capability { sys_nice sys_tty_config }; allow afs_t self:capability { sys_admin sys_nice sys_tty_config };
allow afs_t self:process setsched; allow afs_t self:process { setsched signal };
allow afs_t self:udp_socket create_socket_perms; allow afs_t self:udp_socket create_socket_perms;
allow afs_t self:fifo_file rw_file_perms; allow afs_t self:fifo_file rw_file_perms;
allow afs_t self:unix_stream_socket create_stream_socket_perms; allow afs_t self:unix_stream_socket create_stream_socket_perms;
@ -105,6 +105,8 @@ logging_send_syslog_msg(afs_t)
miscfiles_read_localization(afs_t) miscfiles_read_localization(afs_t)
sysnet_dns_name_resolve(afs_t)
######################################## ########################################
# #
# AFS bossserver local policy # AFS bossserver local policy