Certmaster patch from Dan Walsh.
This commit is contained in:
parent
a7d606860b
commit
bd21cb1e09
@ -1,5 +1,5 @@
|
||||
|
||||
policy_module(certmaster, 1.0.0)
|
||||
policy_module(certmaster, 1.0.1)
|
||||
|
||||
########################################
|
||||
#
|
||||
@ -26,11 +26,11 @@ type certmaster_var_run_t;
|
||||
files_pid_file(certmaster_var_run_t)
|
||||
|
||||
###########################################
|
||||
#
|
||||
# certmaster local policy
|
||||
#
|
||||
# certmaster local policy
|
||||
#
|
||||
|
||||
allow certmaster_t self:capability sys_tty_config;
|
||||
allow certmaster_t self:capability { dac_read_search dac_override sys_tty_config };
|
||||
allow certmaster_t self:tcp_socket create_stream_socket_perms;
|
||||
|
||||
# config files
|
||||
|
Loading…
Reference in New Issue
Block a user