2010-08-25 18:15:35

by jwcart2

[permalink] [raw]
Subject: [refpolicy] Some minor issues in latest Refpolicy git tree

* In qemu_run() on line 182 of policy/modules/apps/qemu.if

samba_run_smb(qemu_t, $2, $3)

samba_run_smb is not defined (but is in an optional block).
qemu_run() is not called in Refpolicy.


* In wine_role_template() on line 103 of policy/modules/apps/wine.if

userdom_unpriv_usertype($1, $1_wine_t)

userdom_unpriv_usertype is not defined.
wine_role_template() is not called in Refpolicy.


* In clamav_append_log() on lines 56 and 57 of
policy/modules/services/clamav.if

allow $1 clamav_log_t:dir list_dir_perms;
append_files_pattern($1, clamav_log_t, clamav_log_t)

clamav_log_t is not defined
clamav_append_log() is called from an optional block in mta.te


* On line 140 of policy/modules/services/likewise.te

seutil_run_semanage(lsassd_t, lsassd_t)

Second argument should be a role.

--
James Carter <[email protected]>
National Security Agency