From: domg472@gmail.com (Dominick Grift) Date: Thu, 4 Mar 2010 19:52:02 +0100 Subject: [refpolicy] [ cobbler patch 1/1] Fix cobbler_admin interface to require cobblerd_initrc_exec_t. Message-ID: <20100304185200.GA9606@localhost.localdomain> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com As per: http://oss.tresys.com/pipermail/refpolicy/2010-March/002258.html Signed-off-by: Dominick Grift --- :100644 100644 1f2c492... 8ce15ef... M policy/modules/services/cobbler.if policy/modules/services/cobbler.if | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/policy/modules/services/cobbler.if b/policy/modules/services/cobbler.if index 1f2c492..8ce15ef 100644 --- a/policy/modules/services/cobbler.if +++ b/policy/modules/services/cobbler.if @@ -161,7 +161,7 @@ interface(`cobbler_manage_lib_files',` interface(`cobblerd_admin',` gen_require(` type cobblerd_t, cobbler_var_lib_t, cobbler_var_log_t; - type cobbler_etc_t; + type cobbler_etc_t, cobblerd_initrc_exec_t; ') allow $1 cobblerd_t:process { ptrace signal_perms getattr }; -- 1.6.6.1 -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 198 bytes Desc: not available Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100304/c6456057/attachment.bin