nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Make setfiles be able to send audit messages.

Browse Source 
When audit subsystem is enabled, and setfiles works from root
dir, setfiles would send the AUDIT_FS_RELABEL information to
audit system, If no permission to send the information to audit
by netlink, setfiles would return error.

The test cases to reproduce this defect:
	=> restorecon -R /
	=> echo $?
	255
	=>

Signed-off-by: Roy.Li <rongqing.li@windriver.com>
This commit is contained in:
Roy.Li 2011-08-22 09:18:30 +08:00 committed by Chris PeBenito
parent ec280b3209
commit 0bd595020c
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/system/selinuxutil.te
View File

@ -557,6 +557,8 @@ init_use_script_fds(setfiles_t)
init_use_script_ptys(setfiles_t)
init_exec_script_files(setfiles_t)
logging_send_audit_msgs(setfiles_t)
logging_send_syslog_msg(setfiles_t)
miscfiles_read_localization(setfiles_t)