Received-SPF: pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18;
From:   Russell Coker <russell@coker.com.au>
To:     Chris PeBenito <pebenito@ieee.org>
Cc:     selinux-refpolicy@vger.kernel.org
Subject: Re: [PATCH] new version of filetrans patch
Date:   Wed, 03 Feb 2021 01:42:27 +1100
Message-ID: <2243812.pyNZXzfhlh@liv>
In-Reply-To: <983ff6fa-2bbc-22f1-a72c-a4eb38127f09@ieee.org>
References: <YBeKKR5cmQe+MTRA@xev> <983ff6fa-2bbc-22f1-a72c-a4eb38127f09@ieee.org>
MIME-Version: 1.0
Content-Transfer-Encoding: 7Bit
Content-Type: text/plain; charset="us-ascii"
Precedence: bulk

On Wednesday, 3 February 2021 12:49:07 AM AEDT Chris PeBenito wrote:
> > Name changes suggested by Dominick and some more additions.
> > 
> > Signed-off-by: Russell Coker <russell@coker.com.au>
> 
> Merged, though I renamed some interfaces and dropped a block that didn't
> apply since it's so close to the merge window closing.

+interface(`systemd_run_passwd_agent',`
+       gen_require(`
+               type systemd_passwd_agent_t, systemd_passwd_agent_exec_t;
+       ')
+
+       domain_auto_transition_pattern($1, systemd_passwd_agent_exec_t, 
systemd_passwd_agent_t)
+       allow systemd_passwd_agent_t $1:fd use;
+       role $2 types systemd_passwd_agent_t;
+')

Why did you change the above to the below?  It needs an auto trans.

interface(`systemd_run_passwd_agent',`
        gen_require(`
                type systemd_passwd_agent_t, systemd_passwd_agent_exec_t;
        ')

        domtrans_pattern($1, systemd_passwd_agent_exec_t, 
systemd_passwd_agent_t)
        allow systemd_passwd_agent_t $1:fd use;
        role $2 types systemd_passwd_agent_t;
')


-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/