From: aranea@aixah.de (Luis Ressel)
Date: Sat,  1 Feb 2014 12:38:38 +0100
Subject: [refpolicy] [PATCH 3/5] couchdb: Dontaudit denials caused by
	Erlang's disksup
In-Reply-To: <1391254720-25899-1-git-send-email-aranea@aixah.de>
References: <1391254609-25712-1-git-send-email-aranea@aixah.de>
	<1391254720-25899-1-git-send-email-aranea@aixah.de>
Message-ID: <1391254720-25899-3-git-send-email-aranea@aixah.de>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

---
 couchdb.te | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/couchdb.te b/couchdb.te
index 9481c02..62f5db1 100644
--- a/couchdb.te
+++ b/couchdb.te
@@ -87,7 +87,12 @@ dev_read_urand(couchdb_t)
 
 files_read_usr_files(couchdb_t)
 
+# disksup tries to monitor the local disks
 fs_getattr_xattr_fs(couchdb_t)
+fs_dontaudit_getattr_all_fs(couchdb_t)
+files_dontaudit_getattr_lost_found_dirs(couchdb_t)
+files_dontaudit_list_var(couchdb_t)
+files_dontaudit_search_all_mountpoints(couchdb_t)
 
 auth_use_nsswitch(couchdb_t)
 
-- 
1.8.5.3