2011-02-16 06:24:34

by Guido Trentalancia

[permalink] [raw]
Subject: [refpolicy] [PATCH 21/34]: patch to allow smartmon to read usr files

This patch adds a permission to the smartmon module so
that it can read usr files.

diff -pruN -x booleans.conf -x corenetwork.if -x corenetwork.te -x modules.conf refpolicy-git-02022011/policy/modules/services/smartmon.te refpolicy-git-02022011-new/policy/modules/services/smartmon.te
--- refpolicy-git-02022011/policy/modules/services/smartmon.te 2011-01-08 19:07:21.326754622 +0100
+++ refpolicy-git-02022011-new/policy/modules/services/smartmon.te 2011-01-26 01:40:05.807973354 +0100
@@ -73,6 +73,8 @@ files_read_etc_runtime_files(fsdaemon_t)
# for config
files_read_etc_files(fsdaemon_t)

+files_read_usr_files(fsdaemon_t)
+
fs_getattr_all_fs(fsdaemon_t)
fs_search_auto_mountpoints(fsdaemon_t)



2011-02-28 14:16:02

by cpebenito

[permalink] [raw]
Subject: [refpolicy] [PATCH 21/34]: patch to allow smartmon to read usr files

On 02/16/11 01:24, Guido Trentalancia wrote:
> This patch adds a permission to the smartmon module so
> that it can read usr files.
>
> diff -pruN -x booleans.conf -x corenetwork.if -x corenetwork.te -x modules.conf refpolicy-git-02022011/policy/modules/services/smartmon.te refpolicy-git-02022011-new/policy/modules/services/smartmon.te
> --- refpolicy-git-02022011/policy/modules/services/smartmon.te 2011-01-08 19:07:21.326754622 +0100
> +++ refpolicy-git-02022011-new/policy/modules/services/smartmon.te 2011-01-26 01:40:05.807973354 +0100
> @@ -73,6 +73,8 @@ files_read_etc_runtime_files(fsdaemon_t)
> # for config
> files_read_etc_files(fsdaemon_t)
>
> +files_read_usr_files(fsdaemon_t)
> +
> fs_getattr_all_fs(fsdaemon_t)
> fs_search_auto_mountpoints(fsdaemon_t)

Merged.

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com