nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fixes

This commit is contained in:
Chris PeBenito 2005-09-12 21:40:19 +00:00
parent 082dcd9eb2
commit 777d80f7a6
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
docs/macro_conversion_guide
View File

@ -41,10 +41,12 @@ kernel_read_system_state($1)
corecmd_exec_shell($1)
files_read_etc_runtime_files($1)
mta_append_spool($1)
ifdef(`TODO',`
optional_policy(`arpwatch.te',`
# why is mail delivered to a directory of type arpwatch_data_t?
allow mta_delivery_agent arpwatch_data_t:dir search;
')
') dnl end TODO
#
# mta_user_agent:
@ -743,7 +745,7 @@ type $1_var_run_t;
files_pid_file($1_var_run_t)
allow $1_t self:process signal_perms;
allow $1_t self:fifo_file rw_file_perms;
allow $1_t self:tcp_socket { listen accept connected_socket_perms }
allow $1_t self:tcp_socket connected_stream_socket_perms;
# for identd
# cjp: this should probably only be inetd_child rules?
allow $1_t self:netlink_tcpdiag_socket r_netlink_socket_perms;