From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Mon, 10 Jan 2011 11:38:34 -0500
Subject: [refpolicy] [PATCH 1/2] DHCPC daemon init network interface,
 try 4
In-Reply-To: <1293754350-9208-1-git-send-email-gizmo@giz-works.com>
References: <1293754350-9208-1-git-send-email-gizmo@giz-works.com>
Message-ID: <4D2B360A.2050408@tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 12/30/10 19:12, Chris Richards wrote:
> Allow dhcpcd DHCP CLient daemon to start.
> 
> Relabel /var/run/dhcpcd from var_run_t to dhcpc_var_run_t
> 
> Signed-off-by: Chris Richards <gizmo@giz-works.com>
> ---
>  policy/modules/system/sysnetwork.fc |    2 +-
>  1 files changed, 1 insertions(+), 1 deletions(-)
> 
> diff --git a/policy/modules/system/sysnetwork.fc b/policy/modules/system/sysnetwork.fc
> index 726619b..11a2306 100644
> --- a/policy/modules/system/sysnetwork.fc
> +++ b/policy/modules/system/sysnetwork.fc
> @@ -63,4 +62,5 @@ ifdef(`distro_redhat',`
>  
>  ifdef(`distro_gentoo',`
>  /var/lib/dhcpc(/.*)?		gen_context(system_u:object_r:dhcpc_state_t,s0)
> +/var/run/dhcpcd(/.*)?		gen_context(system_u:object_r:dhcpc_state_t,s0)
>  ')

Looks like a copy-paste error?  Your comment says dhcpc_var_run_t but
the fc says dhcpc_state_t.


-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com