2010-04-24 16:03:16

by gizmo

Subject: [refpolicy] [PATCH 1/1] bootmisc init script, 2nd try

Allow to create /var/lock/.keep. This prevents Portage from destroying /var/lock under certain conditions. This patch is Gentoo specific.

Signed-off-by: Chris Richards <[email protected]>
---
policy/modules/system/init.te | 3 +++
1 files changed, 3 insertions(+), 0 deletions(-)

diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te
index 764c4be..6de52b6 100644
--- a/policy/modules/system/init.te
+++ b/policy/modules/system/init.te
@@ -437,6 +437,9 @@ ifdef(`distro_gentoo',`
dev_create_generic_dirs(initrc_t)
dev_delete_generic_dirs(initrc_t)

+ # allow bootmisc to create /var/lock/.keep.
+ files_manage_generic_locks(initrc_t)
+
# openrc uses tmpfs for its state data
fs_tmpfs_filetrans(initrc_t, initrc_state_t, { dir file fifo_file lnk_file })

--
1.6.4.4

2010-04-26 17:04:11

by cpebenito

Subject: [refpolicy] [PATCH 1/1] bootmisc init script, 2nd try

On Sat, 2010-04-24 at 16:03 +0000, Chris Richards wrote:
> Allow to create /var/lock/.keep. This prevents Portage from destroying /var/lock under certain conditions. This patch is Gentoo specific.

Merged.

> Signed-off-by: Chris Richards <[email protected]>
> ---
> policy/modules/system/init.te | 3 +++
> 1 files changed, 3 insertions(+), 0 deletions(-)
>
> diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te
> index 764c4be..6de52b6 100644
> --- a/policy/modules/system/init.te
> +++ b/policy/modules/system/init.te
> @@ -437,6 +437,9 @@ ifdef(`distro_gentoo',`
> dev_create_generic_dirs(initrc_t)
> dev_delete_generic_dirs(initrc_t)
>
> + # allow bootmisc to create /var/lock/.keep.
> + files_manage_generic_locks(initrc_t)
> +
> # openrc uses tmpfs for its state data
> fs_tmpfs_filetrans(initrc_t, initrc_state_t, { dir file fifo_file lnk_file })
>

--
Chris PeBenito
Tresys Technology, LLC