nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #264 from bauen1/reenable-setrans

Browse Source
This commit is contained in:
Chris PeBenito 2020-05-27 10:46:08 -04:00
commit 5374e1ac16
2 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
policy/modules/kernel/domain.te
View File

@ -137,6 +137,10 @@ optional_policy(`
libs_use_shared_libs(domain)
')
optional_policy(`
setrans_translate_context(domain)
')
# xdm passes an open file descriptor to xsession-errors.log which is then audited by all confined domains.
optional_policy(`
xserver_dontaudit_use_xdm_fds(domain)

10
policy/modules/system/setrans.if
View File

@ -21,7 +21,7 @@ interface(`setrans_initrc_domtrans',`
#######################################
## <summary>
## Allow a domain to translate contexts. (Deprecated)
## Allow a domain to translate contexts.
## </summary>
## <param name="domain">
## <summary>
@ -30,7 +30,13 @@ interface(`setrans_initrc_domtrans',`
## </param>
#
interface(`setrans_translate_context',`
refpolicywarn(`$0($*) has been deprecated')
gen_require(`
type setrans_t, setrans_var_run_t;
')
allow $1 self:unix_stream_socket create_stream_socket_perms;
stream_connect_pattern($1, setrans_var_run_t, setrans_var_run_t, setrans_t)
files_list_pids($1)
')
######################################