From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Fri, 20 Dec 2013 14:56:44 -0500 Subject: [refpolicy] [PATCH 30/39] init: the gdomap and minissdpd init scripts read the respective environ files in /etc/default. We need to give them a private type so that we can give the gdomap_admin() and minissdpd_admin() access to it, but it seems overengineering to create private environ types for these files In-Reply-To: <1383990320-3340-30-git-send-email-dominick.grift@gmail.com> References: <1383990320-3340-1-git-send-email-dominick.grift@gmail.com> <1383990320-3340-30-git-send-email-dominick.grift@gmail.com> Message-ID: <52B4A0FC.5000305@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 11/09/13 04:45, Dominick Grift wrote: > Signed-off-by: Dominick Grift > --- > policy/modules/system/init.te | 8 ++++++++ > 1 file changed, 8 insertions(+) > > diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te > index 7f8797a..cd97c98 100644 > --- a/policy/modules/system/init.te > +++ b/policy/modules/system/init.te > @@ -454,6 +454,14 @@ ifdef(`distro_debian',` > optional_policy(` > exim_manage_var_lib_files(initrc_t) > ') > + > + optional_policy(` > + gdomap_read_config(initrc_t) > + ') > + > + optional_policy(` > + minissdpd_read_config(initrc_t) > + ') > ') > > ifdef(`distro_gentoo',` Merged. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com