From: gizmo@giz-works.com (Chris Richards) Date: Sun, 18 Apr 2010 15:01:29 -0500 Subject: [refpolicy] [PATCH 1/1] Remove httpd_keytab_t from apache.fc In-Reply-To: <1271615514-6037-1-git-send-email-gizmo@giz-works.com> References: <1271615514-6037-1-git-send-email-gizmo@giz-works.com> Message-ID: <4BCB6519.3080503@giz-works.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Disregard this patch, appears to be related to patch from Dan Walsh (83caba3eb....), which only included file context changes, but was apparently part of a patch series that has not completely been applied. On 04/18/2010 01:31 PM, Chris Richards wrote: > I cannot find any definition of httpd_keytab_t anywhere in refpolicy. > I don't know if the definition was removed somewhere and the fc was > simply not updated, or if there is supposed to be a definition that > somehow never got created, but I cannot compile refpolicy with things > as they are. > > Signed-off-by: Chris Richards > --- > policy/modules/services/apache.fc | 1 - > 1 files changed, 0 insertions(+), 1 deletions(-) > > diff --git a/policy/modules/services/apache.fc b/policy/modules/services/apache.fc > index 9e39aa5..a6fcc0c 100644 > --- a/policy/modules/services/apache.fc > +++ b/policy/modules/services/apache.fc > @@ -5,7 +5,6 @@ HOME_DIR/((www)|(web)|(public_html))(/.+)? gen_context(system_u:object_r:httpd_u > /etc/drupal(/.*)? gen_context(system_u:object_r:httpd_sys_rw_content_t,s0) > /etc/htdig(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0) > /etc/httpd(/.*)? gen_context(system_u:object_r:httpd_config_t,s0) > -/etc/httpd/conf/keytab -- gen_context(system_u:object_r:httpd_keytab_t,s0) > /etc/httpd/logs gen_context(system_u:object_r:httpd_log_t,s0) > /etc/httpd/modules gen_context(system_u:object_r:httpd_modules_t,s0) > /etc/lighttpd(/.*)? gen_context(system_u:object_r:httpd_config_t,s0) >