nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

shutdown: needs to connect to init with a unix stream socket.

Browse Source 
Signed-off-by: Dominick Grift <domg472@gmail.com>
This commit is contained in:
Dominick Grift 2010-10-04 20:23:41 +02:00 committed by Chris PeBenito
parent a9acfbd613
commit 5718c0a59a
2 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
policy/modules/admin/shutdown.te
View File

@ -45,6 +45,7 @@ auth_write_login_records(shutdown_t)
init_dontaudit_write_utmp(shutdown_t) init_dontaudit_write_utmp(shutdown_t)
init_read_utmp(shutdown_t) init_read_utmp(shutdown_t)
init_stream_connect(shutdown_t)
init_telinit(shutdown_t) init_telinit(shutdown_t)
logging_send_audit_msgs(shutdown_t) logging_send_audit_msgs(shutdown_t)

18
policy/modules/system/init.if
View File

@ -506,6 +506,24 @@ interface(`init_sigchld',`
allow $1 init_t:process sigchld; allow $1 init_t:process sigchld;
') ')
########################################
## <summary>
## Connect to init with a unix socket.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`init_stream_connect',`
gen_require(`
type init_t;
')
allow $1 init_t:unix_stream_socket connectto;
')
######################################## ########################################
## <summary> ## <summary>
## Inherit and use file descriptors from init. ## Inherit and use file descriptors from init.