2008-11-13 17:57:12

by martin

Subject: [refpolicy] pty creation type

All my ptys are now created as devpts_t. I think this got lost in the ubac
conversion.

Index: policy/modules/system/userdomain.if
===================================================================
--- policy/modules/system/userdomain.if.orig
+++ policy/modules/system/userdomain.if
@@ -57,6 +57,7 @@
dontaudit $1_t self:socket create;

allow $1_t user_devpts_t:chr_file { setattr rw_chr_file_perms };
+ term_create_pty($1_t, user_devpts_t)
# avoid annoying messages on terminal hangup on role change
dontaudit $1_t user_devpts_t:chr_file ioctl;


--
Martin Orr

2008-11-13 18:53:13

by cpebenito

Subject: [refpolicy] pty creation type

On Thu, 2008-11-13 at 17:57 +0000, Martin Orr wrote:
> All my ptys are now created as devpts_t. I think this got lost in the ubac
> conversion.

Merged.

> Index: policy/modules/system/userdomain.if
> ===================================================================
> --- policy/modules/system/userdomain.if.orig
> +++ policy/modules/system/userdomain.if
> @@ -57,6 +57,7 @@
> dontaudit $1_t self:socket create;
>
> allow $1_t user_devpts_t:chr_file { setattr rw_chr_file_perms };
> + term_create_pty($1_t, user_devpts_t)
> # avoid annoying messages on terminal hangup on role change
> dontaudit $1_t user_devpts_t:chr_file ioctl;
>

--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150