From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Thu, 13 Nov 2008 13:53:13 -0500
Subject: [refpolicy] pty creation type
In-Reply-To: <491C6A78.6070104@martinorr.name>
References: <491C6A78.6070104@martinorr.name>
Message-ID: <1226602393.24358.64.camel@gorn.columbia.tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Thu, 2008-11-13 at 17:57 +0000, Martin Orr wrote:
> All my ptys are now created as devpts_t.  I think this got lost in the ubac
> conversion.

Merged.

> Index: policy/modules/system/userdomain.if
> ===================================================================
> --- policy/modules/system/userdomain.if.orig
> +++ policy/modules/system/userdomain.if
> @@ -57,6 +57,7 @@
>  	dontaudit $1_t self:socket create;
> 
>  	allow $1_t user_devpts_t:chr_file { setattr rw_chr_file_perms };
> +	term_create_pty($1_t, user_devpts_t)
>  	# avoid annoying messages on terminal hangup on role change
>  	dontaudit $1_t user_devpts_t:chr_file ioctl;
> 

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150