From: dominick.grift@gmail.com (Dominick Grift) Date: Sat, 9 Nov 2013 10:44:46 +0100 Subject: [refpolicy] [PATCH 05/39] authlogin: unix_chkpwd traverses / on sysfs device on Debian In-Reply-To: <1383990320-3340-1-git-send-email-dominick.grift@gmail.com> References: <1383990320-3340-1-git-send-email-dominick.grift@gmail.com> Message-ID: <1383990320-3340-5-git-send-email-dominick.grift@gmail.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Signed-off-by: Dominick Grift --- policy/modules/system/authlogin.te | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/system/authlogin.te b/policy/modules/system/authlogin.te index 09b791d..367e920 100644 --- a/policy/modules/system/authlogin.te +++ b/policy/modules/system/authlogin.te @@ -105,6 +105,7 @@ domain_dontaudit_use_interactive_fds(chkpwd_t) dev_read_rand(chkpwd_t) dev_read_urand(chkpwd_t) +dev_search_sysfs(chkpwd_t) files_read_etc_files(chkpwd_t) # for nscd -- 1.8.3.1