selinux-refpolicy/policy/modules
Sven Vermeulen dc663fe40a Introduce init_daemon_run_dir transformation
Due to the introduction of /run, many init scripts need to create the daemon run
dirs (such as /run/udev for the udev init script). To simplify this, we
introduce the "daemonrundir" attribute to which initrc_t has the necessary
create_dirs_perms granted. Because it often needs to change the attributes or
ownership of the directories as well, we also grant the setattr rights on the
directory.

Then, when needed, the modules can call this interface while adding the name of
the directory. This will trigger a named file transition when initrc_t creates
this directory:
  init_daemon_run_dir(udev_var_run_t, "udev")
will trigger
  files_pid_filetrans(initrc_t, udev_var_run_t, dir, "udev")

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2012-08-29 08:45:17 -04:00
..
admin Bump module versions for release. 2012-07-25 14:33:06 -04:00
apps Move modules to contrib submodule. 2011-09-09 10:10:03 -04:00
contrib@15301bc4d2 Update contrib. 2012-08-22 11:04:24 -04:00
kernel Module version bump for /dev/mei type and label from Dominick Grift. 2012-08-23 09:39:13 -04:00
roles Bump module versions for release. 2012-07-25 14:33:06 -04:00
services Module version bump for fc substitutions optimizations from Sven Vermeulen. 2012-08-15 11:00:55 -04:00
system Introduce init_daemon_run_dir transformation 2012-08-29 08:45:17 -04:00