From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Wed, 03 Mar 2010 10:32:22 -0500 Subject: [refpolicy] [ userdom patch 1/1] Fix userdom_write_user_tmp_sockets to use write_sock_file_perms to allow domains to open user_tmp_t sock_files. In-Reply-To: <20100303151054.GA21923@localhost.localdomain> References: <20100303151054.GA21923@localhost.localdomain> Message-ID: <1267630342.30557.95.camel@gorn.columbia.tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On Wed, 2010-03-03 at 16:10 +0100, Dominick Grift wrote: > Signed-off-by: Dominick Grift Merged. > --- > :100644 100644 cd08bc3... adbe494... M policy/modules/system/userdomain.if > policy/modules/system/userdomain.if | 2 +- > 1 files changed, 1 insertions(+), 1 deletions(-) > > diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if > index cd08bc3..adbe494 100644 > --- a/policy/modules/system/userdomain.if > +++ b/policy/modules/system/userdomain.if > @@ -2069,7 +2069,7 @@ interface(`userdom_write_user_tmp_sockets',` > type user_tmp_t; > ') > > - allow $1 user_tmp_t:sock_file write; > + allow $1 user_tmp_t:sock_file write_sock_file_perms; > files_search_tmp($1) > ') > > _______________________________________________ > refpolicy mailing list > refpolicy at oss.tresys.com > http://oss.tresys.com/mailman/listinfo/refpolicy -- Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150