nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Allow portage to set file capabilities, needed for installations like for wireshark

Browse Source 
The installation of the wireshark package (and perhaps others) requires
portage setting file capabilities (through the setcap binary).

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
This commit is contained in:
Sven Vermeulen 2011-04-28 15:30:12 -04:00 committed by Chris PeBenito
parent 9ec9808df5
commit 4061b06a4a
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/admin/portage.te
View File

@ -122,7 +122,7 @@ optional_policy(`
# - setexec to run portage fetch
allow portage_t self:process { setfscreate setexec };
# - kill for mysql merging, at least
allow portage_t self:capability { sys_nice kill };
allow portage_t self:capability { sys_nice kill setfcap };
# user post-sync scripts
can_exec(portage_t, portage_conf_t)