2010-04-06 13:24:23

by domg472

[permalink] [raw]
Subject: [refpolicy] [ rpc patch 1/1] Move kernel_request_load_module(gssd_t) to the proper place.

Signed-off-by: Dominick Grift <[email protected]>
---
:100644 100644 33d34dd... 797d628... M policy/modules/services/rpc.te
policy/modules/services/rpc.te | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/policy/modules/services/rpc.te b/policy/modules/services/rpc.te
index 33d34dd..797d628 100644
--- a/policy/modules/services/rpc.te
+++ b/policy/modules/services/rpc.te
@@ -74,7 +74,6 @@ kernel_read_system_state(rpcd_t)
kernel_read_network_state(rpcd_t)
# for rpc.rquotad
kernel_read_sysctl(rpcd_t)
-kernel_request_load_module(gssd_t)
kernel_rw_fs_sysctls(rpcd_t)
kernel_dontaudit_getattr_core_if(rpcd_t)
kernel_signal(rpcd_t)
@@ -192,6 +191,7 @@ files_tmp_filetrans(gssd_t, gssd_tmp_t, { file dir })
kernel_read_system_state(gssd_t)
kernel_read_network_state(gssd_t)
kernel_read_network_state_symlinks(gssd_t)
+kernel_request_load_module(gssd_t)
kernel_search_network_sysctl(gssd_t)
kernel_signal(gssd_t)

--
1.7.0.1

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100406/6ae070c5/attachment.bin


2010-04-06 19:11:38

by cpebenito

[permalink] [raw]
Subject: [refpolicy] [ rpc patch 1/1] Move kernel_request_load_module(gssd_t) to the proper place.

On Tue, 2010-04-06 at 15:24 +0200, Dominick Grift wrote:
> Signed-off-by: Dominick Grift <[email protected]>

Merged.

> ---
> :100644 100644 33d34dd... 797d628... M policy/modules/services/rpc.te
> policy/modules/services/rpc.te | 2 +-
> 1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/policy/modules/services/rpc.te b/policy/modules/services/rpc.te
> index 33d34dd..797d628 100644
> --- a/policy/modules/services/rpc.te
> +++ b/policy/modules/services/rpc.te
> @@ -74,7 +74,6 @@ kernel_read_system_state(rpcd_t)
> kernel_read_network_state(rpcd_t)
> # for rpc.rquotad
> kernel_read_sysctl(rpcd_t)
> -kernel_request_load_module(gssd_t)
> kernel_rw_fs_sysctls(rpcd_t)
> kernel_dontaudit_getattr_core_if(rpcd_t)
> kernel_signal(rpcd_t)
> @@ -192,6 +191,7 @@ files_tmp_filetrans(gssd_t, gssd_tmp_t, { file dir })
> kernel_read_system_state(gssd_t)
> kernel_read_network_state(gssd_t)
> kernel_read_network_state_symlinks(gssd_t)
> +kernel_request_load_module(gssd_t)
> kernel_search_network_sysctl(gssd_t)
> kernel_signal(gssd_t)
>
> _______________________________________________
> refpolicy mailing list
> refpolicy at oss.tresys.com
> http://oss.tresys.com/mailman/listinfo/refpolicy

--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150