From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Sat, 8 Feb 2014 09:44:08 -0500
Subject: [refpolicy] [PATCH 3/5] couchdb: Dontaudit denials caused by
 Erlang's disksup
In-Reply-To: <1391254720-25899-3-git-send-email-aranea@aixah.de>
References: <1391254609-25712-1-git-send-email-aranea@aixah.de>	<1391254720-25899-1-git-send-email-aranea@aixah.de>
	<1391254720-25899-3-git-send-email-aranea@aixah.de>
Message-ID: <52F642B8.6060407@tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 2/1/2014 6:38 AM, Luis Ressel wrote:
> ---
>  couchdb.te | 5 +++++
>  1 file changed, 5 insertions(+)
> 
> diff --git a/couchdb.te b/couchdb.te
> index 9481c02..62f5db1 100644
> --- a/couchdb.te
> +++ b/couchdb.te
> @@ -87,7 +87,12 @@ dev_read_urand(couchdb_t)
>  
>  files_read_usr_files(couchdb_t)
>  
> +# disksup tries to monitor the local disks
>  fs_getattr_xattr_fs(couchdb_t)
> +fs_dontaudit_getattr_all_fs(couchdb_t)
> +files_dontaudit_getattr_lost_found_dirs(couchdb_t)
> +files_dontaudit_list_var(couchdb_t)
> +files_dontaudit_search_all_mountpoints(couchdb_t)
>  
>  auth_use_nsswitch(couchdb_t)

Merged.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com