nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Allow cdrecord_t to execute bin_t from Dan Walsh

Browse Source 
growisofs executes mkisofs
This commit is contained in:
Jeremy Solt 2010-03-04 14:03:59 -05:00 committed by Chris PeBenito
parent 4af2b3fb98
commit cf3da95084
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
policy/modules/apps/cdrecord.te
View File

@ -32,6 +32,9 @@ allow cdrecord_t self:process { getcap getsched setsched sigkill };
allow cdrecord_t self:unix_dgram_socket create_socket_perms;
allow cdrecord_t self:unix_stream_socket create_stream_socket_perms;
# growisofs uses mkisofs
corecmd_exec_bin(cdrecord_t)
# allow searching for cdrom-drive
dev_list_all_dev_nodes(cdrecord_t)
dev_read_sysfs(cdrecord_t)