nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #407 from ffontaine/master

Browse Source
This commit is contained in:
Chris PeBenito 2021-09-13 13:20:12 -07:00
commit 3988924056
1 changed files with 18 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
policy/modules/services/samba.te
View File

@ -396,8 +396,6 @@ userdom_signal_all_users(smbd_t)
userdom_home_filetrans_user_home_dir(smbd_t)
userdom_user_home_dir_filetrans_user_home_content(smbd_t, { dir file lnk_file sock_file fifo_file })
usermanage_read_crack_db(smbd_t)
ifdef(`hide_broken_symptoms',`
files_dontaudit_getattr_default_dirs(smbd_t)
files_dontaudit_getattr_boot_dirs(smbd_t)
@ -413,18 +411,6 @@ tunable_policy(`samba_create_home_dirs',`
userdom_create_user_home_dirs(smbd_t)
')
tunable_policy(`samba_domain_controller',`
gen_require(`
class passwd passwd;
')
usermanage_domtrans_passwd(smbd_t)
usermanage_kill_passwd(smbd_t)
usermanage_domtrans_useradd(smbd_t)
usermanage_domtrans_groupadd(smbd_t)
allow smbd_t self:passwd passwd;
')
tunable_policy(`samba_enable_home_dirs',`
userdom_manage_user_home_content_dirs(smbd_t)
userdom_manage_user_home_content_files(smbd_t)
@ -505,6 +491,24 @@ optional_policy(`
seutil_sigchld_newrole(smbd_t)
')
optional_policy(`
usermanage_read_crack_db(smbd_t)
')
optional_policy(`
tunable_policy(`samba_domain_controller',`
gen_require(`
class passwd passwd;
')
usermanage_domtrans_passwd(smbd_t)
usermanage_kill_passwd(smbd_t)
usermanage_domtrans_useradd(smbd_t)
usermanage_domtrans_groupadd(smbd_t)
allow smbd_t self:passwd passwd;
')
')
########################################
#
# Nmbd Local policy