From: dac.override@gmail.com (Dominick Grift) Date: Fri, 30 Dec 2016 22:11:15 +0100 Subject: [refpolicy] [PATCH] plymouth: use the correct running domain for the client In-Reply-To: <1483132084.2893.3.camel@trentalancia.net> References: <1483132084.2893.3.camel@trentalancia.net> Message-ID: <261d8a4f-52d2-0edf-1b4a-c2a4559f8628@gmail.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 12/30/2016 10:08 PM, Guido Trentalancia via refpolicy wrote: > The plymouth client needs a domain for short running processes > which are started by init scripts instead of an application > domain. > > Signed-off-by: Guido Trentalancia > --- > policy/modules/contrib/plymouthd.te | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff -pru a/policy/modules/contrib/plymouthd.te b/policy/modules/contrib/plymouthd.te > --- a/policy/modules/contrib/plymouthd.te 2016-12-22 23:12:59.391081860 +0100 > +++ b/policy/modules/contrib/plymouthd.te 2016-12-30 21:58:06.300261216 +0100 > @@ -7,7 +7,7 @@ policy_module(plymouthd, 1.3.1) > > type plymouth_t; > type plymouth_exec_t; > -application_domain(plymouth_t, plymouth_exec_t) > +init_system_domain(plymouth_t, plymouth_exec_t) > role system_r types plymouth_t; You should probably be able to drop the role system_r types plymouth_t as that is probably already part of init_system_domain() and is thus redundant > > type plymouthd_t; > _______________________________________________ > refpolicy mailing list > refpolicy at oss.tresys.com > http://oss.tresys.com/mailman/listinfo/refpolicy > -- Key fingerprint = 5F4D 3CDB D3F8 3652 FBD8 02D5 3B6C 5F1D 2C7B 6B02 https://sks-keyservers.net/pks/lookup?op=get&search=0x3B6C5F1D2C7B6B02 Dominick Grift -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 648 bytes Desc: OpenPGP digital signature Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20161230/a6c7da7d/attachment-0001.bin