From: pebenito@ieee.org (Chris PeBenito)
Date: Tue, 12 Sep 2017 19:14:51 -0400
Subject: [refpolicy] [PATCH] cgmanager: Apply auth_use_nsswitch interface
In-Reply-To: <20170912073221.26455-1-aranea@aixah.de>
References: <20170912073221.26455-1-aranea@aixah.de>
Message-ID: <9b057909-4551-cfef-bf22-2aaa5e58dd4c@ieee.org>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 09/12/2017 03:32 AM, Luis Ressel via refpolicy wrote:
> From: Jason Zaman <jason@perfinion.com>
> 
> cgmanager looks up usernames in /etc/passwd, for which a map permission
> may become neccessary.
> ---
>   cgmanager.te | 2 ++
>   1 file changed, 2 insertions(+)
> 
> diff --git a/cgmanager.te b/cgmanager.te
> index c3cc521..2674193 100644
> --- a/cgmanager.te
> +++ b/cgmanager.te
> @@ -40,6 +40,8 @@ allow cgmanager_t cgmanager_run_t:dir mounton;
>   kernel_domtrans_to(cgmanager_t, cgmanager_exec_t)
>   kernel_read_system_state(cgmanager_t)
>   
> +auth_use_nsswitch(cgmanager_t)
> +
>   corecmd_exec_bin(cgmanager_t)

Merged.

-- 
Chris PeBenito