2014-03-15 17:13:11

by Nicolas Iooss

Subject: [refpolicy] [PATCH] apt: remove non-existing permission set write_dir_perms

write_dir_perms doesn't exist in policy/support/obj_perm_sets.spt so this
patch removes the buggy dontaudit statement from apt_read_cache.
---
apt.if | 1 -
1 file changed, 1 deletion(-)

diff --git a/apt.if b/apt.if
index cde81d2..0a1bc49 100644
--- a/apt.if
+++ b/apt.if
@@ -171,7 +171,6 @@ interface(`apt_read_cache',`

files_search_var($1)
allow $1 apt_var_cache_t:dir list_dir_perms;
- dontaudit $1 apt_var_cache_t:dir write_dir_perms;
allow $1 apt_var_cache_t:file read_file_perms;
')

--
1.9.0

2014-04-04 19:15:33

by cpebenito

Subject: [refpolicy] [PATCH] apt: remove non-existing permission set write_dir_perms

On 03/15/2014 01:13 PM, Nicolas Iooss wrote:
> write_dir_perms doesn't exist in policy/support/obj_perm_sets.spt so this
> patch removes the buggy dontaudit statement from apt_read_cache.
> ---
> apt.if | 1 -
> 1 file changed, 1 deletion(-)
>
> diff --git a/apt.if b/apt.if
> index cde81d2..0a1bc49 100644
> --- a/apt.if
> +++ b/apt.if
> @@ -171,7 +171,6 @@ interface(`apt_read_cache',`
>
> files_search_var($1)
> allow $1 apt_var_cache_t:dir list_dir_perms;
> - dontaudit $1 apt_var_cache_t:dir write_dir_perms;
> allow $1 apt_var_cache_t:file read_file_perms;
> ')

Merged.

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com